DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e85c94b8c11cee0d40849ebeedf407c1_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e85c94b8c11cee0d40849ebeedf407c1_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e85c94b8c11cee0d40849ebeedf407c1_JaffaCakes118
Size
84KB
MD5
e85c94b8c11cee0d40849ebeedf407c1
SHA1
e93eaeb79a6c31089f47e2a2408c828a5a53a049
SHA256
95962a70eaaaf270422e3ae349e305f6af8177e9314a45c7d15c1df8674f72dc
SHA512
a802127f490c48c1206b29df69d97731e695bab850ec396f0d2c51de33d9a26acf9a3aecd593d7f9558888073f2a501065b457f121c48f118ac6f04c1e71ac49
SSDEEP
1536:9++3YFcOFbu1VU/gWzA/94ub2u1me04NZFHOlO+Rd7w1C7HOlO+:9++IRFbJ/DzAWU2uz04NZBOlOWTOlO
Checks for missing Authenticode signature.
resource |
---|
e85c94b8c11cee0d40849ebeedf407c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE