DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
Static task
static1
Behavioral task
behavioral1
Sample
0ddf1dfe34bf81cf9dba8cd59fa6d1a7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ddf1dfe34bf81cf9dba8cd59fa6d1a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0ddf1dfe34bf81cf9dba8cd59fa6d1a7_JaffaCakes118
Size
118KB
MD5
0ddf1dfe34bf81cf9dba8cd59fa6d1a7
SHA1
46a9087785bee155a02f95aedd2eccb620bd47f7
SHA256
b3fc1d5fc0ee89433a63c6416229ed500c595eea094ab0b86eaa91fdc67ccd21
SHA512
4f3902a5940c3e6ff64177db2bc082af2c14121d864a65e3bac2b2df6db6a1258d325ad2bd5e71f21d75ccd504cf836955feceef4287d703b300d751ce856299
SSDEEP
3072:d4JUna+/aGlTDzepiloYHGn5S+LxMcFh8lYuOGuHr:KWnHSqT6MHGAgYOGuL
Checks for missing Authenticode signature.
resource |
---|
0ddf1dfe34bf81cf9dba8cd59fa6d1a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ