DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb491549036589762e69a209a0316657_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb491549036589762e69a209a0316657_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eb491549036589762e69a209a0316657_JaffaCakes118
Size
690KB
MD5
eb491549036589762e69a209a0316657
SHA1
5ec7d0ee4a3f1f73a5d665aaacc46d34190b13c2
SHA256
89137a5d593d2627ef96edb700904dbeda7e4888a9fccdcb246154813c985f9c
SHA512
b09bfcb03cb0a439621d92e2d8a1d40bb55f2405019b9f15125f4ceb75bb0bafbb7fb6bee9f32ef11844428a518c150abb98045dfa55acd7b230019c5894988b
SSDEEP
12288:CA+IMPxWhE3yqZ5VvnoWrQmvBksNSSzA:j+IcYE3NZ/Z
Checks for missing Authenticode signature.
resource |
---|
eb491549036589762e69a209a0316657_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ