DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f62d0dc6caf84a2fd383f05f634388b6_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f62d0dc6caf84a2fd383f05f634388b6_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f62d0dc6caf84a2fd383f05f634388b6_JaffaCakes118
Size
84KB
MD5
f62d0dc6caf84a2fd383f05f634388b6
SHA1
826e4400b95b52c57e482c648f5b5bb2b86d53f3
SHA256
0e6b2997542b693be506ca885f6b0137439f80c9c5b25ab707be410fea36a734
SHA512
1eba675abc6f084b13e02358b4254e65569cc09ecf0e64fea47f37970d213f7d6680caf17c9bda0a23cb1b94a826950ac0f18dc0b1d945b028e392542e51de10
SSDEEP
1536:pW7FwkWHQX9etxe26mOFMJSStwd/fnzyc2P6cR4tv:pWZtMQXae26mOFMJSSqdHW8Pv
Checks for missing Authenticode signature.
resource |
---|
f62d0dc6caf84a2fd383f05f634388b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE