DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
Static task
static1
Behavioral task
behavioral1
Sample
afc7be61b749904be68e9810889ba790_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
afc7be61b749904be68e9810889ba790_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
afc7be61b749904be68e9810889ba790_JaffaCakes118
Size
128KB
MD5
afc7be61b749904be68e9810889ba790
SHA1
98a68d7d6aba54b1357421286e0ce37c82a5506c
SHA256
318c27adeefb54e3ca80e7ccb0a6890c331ac08b3f07f82f44450fd49f85d939
SHA512
cbd9483fc08c5eb57147868437cc30b9c3bdb6e4080a73cd0850f2d1e2c32c48c413089649fadf4a505074ef8e97f270e346d88fd3e6cdc27ac92260309355b3
SSDEEP
3072:iIFSQ6OvvRLIFSQ6OvvRLIFSQ6OvvRLIFSQ6OvvR:oQxfQxfQxfQx
Checks for missing Authenticode signature.
resource |
---|
afc7be61b749904be68e9810889ba790_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ