DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bbd4ac3851cc866a3bee9fe4c8046e24_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbd4ac3851cc866a3bee9fe4c8046e24_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bbd4ac3851cc866a3bee9fe4c8046e24_JaffaCakes118
Size
65KB
MD5
bbd4ac3851cc866a3bee9fe4c8046e24
SHA1
3cbe3c9f2f9cb8821779e07ae516ebdd57ebd021
SHA256
955198e819222e48a22e152f2d46f39b5c8484aea9ccb59cbed3da947381590a
SHA512
d70bca40a00d7a9839d8b8626b40c51be722d11471e22ebb192fc3e3529b6c3065192ac666dc2f97a3986849aa34eda13afc579609598e18d557780fa9a8799c
SSDEEP
1536:1l9qosE9Wp9wWh+ALDC6SKQfC7G0h5bVRX:rUxR+QDUKa8G0npRX
Checks for missing Authenticode signature.
resource |
---|
bbd4ac3851cc866a3bee9fe4c8046e24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ