DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Kjhjkfdsa
Static task
static1
Behavioral task
behavioral1
Sample
d1b299ee1a91d520caae372189bcb020_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d1b299ee1a91d520caae372189bcb020_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d1b299ee1a91d520caae372189bcb020_JaffaCakes118
Size
160KB
MD5
d1b299ee1a91d520caae372189bcb020
SHA1
49cf0ab47c0018be2804263a94df487d817a396b
SHA256
551ea00018860e701d467f9568e3bc6c9abe520d4e920ab9c0caf2a435f8bd0d
SHA512
a882070ad3a58e3afcde367adc3f4d48f8d83de148ff4cd67a5d0d1d62097f237663fef6216136a267d75bd55f32fb814d2d520ddc8cffdeda569d294f65ae3a
SSDEEP
3072:0QB5B9FY+4pFY+4pFY+4pFY+4pFY+4pFY+4pFY+4pFY+4pFY+4pFY+4R:d5Hy/py/py/py/py/py/py/py/py/py5
Checks for missing Authenticode signature.
resource |
---|
d1b299ee1a91d520caae372189bcb020_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Kjhjkfdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE