DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
Static task
static1
Behavioral task
behavioral1
Sample
e147e2e8a35974b7ee779eae24cf6475_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e147e2e8a35974b7ee779eae24cf6475_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e147e2e8a35974b7ee779eae24cf6475_JaffaCakes118
Size
119KB
MD5
e147e2e8a35974b7ee779eae24cf6475
SHA1
d420497414235c04e527dce0c9f983c745959d93
SHA256
1c5ad64ea3c0b905b0f58bde7934e37cb94adbd5c878fe4c225062f1d991e303
SHA512
e29910047141b10f4585bca1646d43dd028100eb93c795865c3cc5e5807b29122c3135a9f45f301daa46af70b6a85906056ceccebe9efc75064f1dba5174382b
SSDEEP
3072:ud4JUnmdpyq+GhYLH2tYJsuYKft2bntN4TMAx:bWnmjyViYr2aJSbtN4Tpx
Checks for missing Authenticode signature.
resource |
---|
e147e2e8a35974b7ee779eae24cf6475_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ