DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f4b9b69424e224eca5f74b368b3fe394_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4b9b69424e224eca5f74b368b3fe394_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f4b9b69424e224eca5f74b368b3fe394_JaffaCakes118
Size
236KB
MD5
f4b9b69424e224eca5f74b368b3fe394
SHA1
15688fe5f06403fe0c742a771bd1ec9cf31e7fe6
SHA256
5b1fb0acda79becf82ab3b31488d92c71b51391c46ef5485f6d09d873e1b90e5
SHA512
af65c4a44f89d373da762853f77764e23915e3369612bd3ca48d5abbf18088fa9c24483bf7e1e32e3f39dc81880102a4db6d51db186e0dc27beb59adcd8930a9
SSDEEP
3072:ul9Bm6b0jSrJQ/BbjCO1u0GhDruYLlASnlj3qSXY:ulelgWEOWxldlj3qn
Checks for missing Authenticode signature.
resource |
---|
f4b9b69424e224eca5f74b368b3fe394_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ