DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6104e1e2b6b1ac18228437003f7620a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6104e1e2b6b1ac18228437003f7620a_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f6104e1e2b6b1ac18228437003f7620a_JaffaCakes118
Size
12KB
MD5
f6104e1e2b6b1ac18228437003f7620a
SHA1
0160bdd2c5b8cc0e2aa2d047d8952427ef5fa996
SHA256
53907af909d7940e0ccb0463fc6d4679c7c044f6ed2612648d9371275ac3599d
SHA512
c29bfe1848ae24571cd520389a05e6baec67810482c2e807854c9e389f7ba4c896461c164af35177ddb995c3092606bdd2aa75fda4110b16b8604865a46b9f8c
SSDEEP
192:kpp/+CvyFv7B+zWwl3llnfz3cW9y/HIMe5UC85qMAXa:kpp/+ayd9+DnLcW9jF85f
Checks for missing Authenticode signature.
resource |
---|
f6104e1e2b6b1ac18228437003f7620a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ