DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
42fd6e363824f5fb05d354cf8ba61036_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
42fd6e363824f5fb05d354cf8ba61036_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
42fd6e363824f5fb05d354cf8ba61036_JaffaCakes118
Size
207KB
MD5
42fd6e363824f5fb05d354cf8ba61036
SHA1
7aa794e681cff1b8867ca0678e062d11d63e3d12
SHA256
df7e2309f8fe4306ea1c776831a474fe128732d71010fad89991b2fec729b253
SHA512
db678289b6f91667b085e0fea5da7b26968b8229fba0b9331cc2f004abd5644b40cf3f796d61990868c3588e9df5e2316d6cf0f8aa4037ad7f32e96a0b14d28c
SSDEEP
3072:3esUAl7/aesUAl7/aesUAl7/aesUAl7/aesUAl7/aesUAl7/:3dadadadadad
Checks for missing Authenticode signature.
resource |
---|
42fd6e363824f5fb05d354cf8ba61036_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ