DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f1f7b7d8a70e0517e93d16a5c410e420_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1f7b7d8a70e0517e93d16a5c410e420_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1f7b7d8a70e0517e93d16a5c410e420_JaffaCakes118
Size
84KB
MD5
f1f7b7d8a70e0517e93d16a5c410e420
SHA1
fd88c9d1ed8fe048072e2057d40ccc8538cf5778
SHA256
6c51537ae4a157b9ed664173f97f91ff65ec79bfffa32e467bcc157a26a1c226
SHA512
537caae817444a737395ac6293da85806fcd37b375c6f030129ffdee086d0eacc1ba3d9ae47dc750e795abb18af690d3f7f6aca3cb6a5370f6e1eb652e4cf8d4
SSDEEP
768:+TGpITDr0mKqK8/bqRF9QgeVf0oj0pGaVt8boIohJKHfSS3y6aMzwYLmscbUiySS:S5TS8/bIA/Rc/VtC8aS8y6XzwY6s3Nn
Checks for missing Authenticode signature.
resource |
---|
f1f7b7d8a70e0517e93d16a5c410e420_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ