DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Kjhjkfdsa
Static task
static1
Behavioral task
behavioral1
Sample
e0691b503b74488c34106c36fdd0a1f2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0691b503b74488c34106c36fdd0a1f2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e0691b503b74488c34106c36fdd0a1f2_JaffaCakes118
Size
159KB
MD5
e0691b503b74488c34106c36fdd0a1f2
SHA1
4cf1a34ecb07c4dc7a505e0017df5ce0b6b1986d
SHA256
b0428cf6e1a1da7b2652e5fe9a97263dc503a8889515346c53b70432d99a4ece
SHA512
c2b0a3ceae9235d7e30f863592d017dc5a560dfd8590e66c65ff7c3eda1114b31efa8225f02eb5a29a2eb67c87103f01f0b6995952605a3f120873dde6a9d485
SSDEEP
3072:CmbEY9kyQKU9kyQKU9kyQKU9kyQKU9kyQKU9kyQKU9kyQKU9kyQKU9kyQKU9kyQ4:AY5xU5xU5xU5xU5xU5xU5xU5xU5xU5L
Checks for missing Authenticode signature.
resource |
---|
e0691b503b74488c34106c36fdd0a1f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Kjhjkfdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE