DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f4266eb5a17aa0054669ba2599d0ac5d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4266eb5a17aa0054669ba2599d0ac5d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f4266eb5a17aa0054669ba2599d0ac5d_JaffaCakes118
Size
108KB
MD5
f4266eb5a17aa0054669ba2599d0ac5d
SHA1
461bd2650593fc8873321e7ee437d9928bebcecf
SHA256
d1b970170150dcfe8c3c99bdc76a5e9d848f81d17dcdbfbc2dea5e4d2609d64e
SHA512
1a650035ff93489fad340e94c09bf92d705ada7ad7ffa442d2e892c8fbf58e9d9451ca6b722ccce62a2ad967a6b8cc6bad6854c0dfe320ca505c80e4df8fa6b2
SSDEEP
1536:sfCMwfAOzqLqvKbRD+7zY4OBmGPVjVmZxUZyyMsweEVkkNqj/Q+yZ2P:VMkqLyKbJX4+mGZVmZx+MNekNcQq
Checks for missing Authenticode signature.
resource |
---|
f4266eb5a17aa0054669ba2599d0ac5d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ