DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
f56a1959ac2f1d11abfecd111be9da47_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f56a1959ac2f1d11abfecd111be9da47_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f56a1959ac2f1d11abfecd111be9da47_JaffaCakes118
Size
32KB
MD5
f56a1959ac2f1d11abfecd111be9da47
SHA1
dbed64b654dcc7209614bfa7e9e983e3742a0f55
SHA256
1993568dd730ccc8607c7ca7166cb43d7ea15c1d3689d4627c82a99ec8cb3a30
SHA512
0a0ac23cf0d1f73dbfd74c7dd7c1655c33fa05520a8be97c7b1fbc236f7329ee16ddcaef9a4ce64dfb29fabfc07b2075242ac4e7c5341650d46dea907a19d046
SSDEEP
768:4+ThI7GlIAbpGRcoJ7iQHj3muqO0TNxKswXB:42hdjpYcodfHjOXTNKB
Checks for missing Authenticode signature.
resource |
---|
f56a1959ac2f1d11abfecd111be9da47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ