DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f826efa92182dc879d528240ce62148b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f826efa92182dc879d528240ce62148b_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f826efa92182dc879d528240ce62148b_JaffaCakes118
Size
32KB
MD5
f826efa92182dc879d528240ce62148b
SHA1
06d1fafcc07193f01442d05b8be094b55c3edc16
SHA256
c17604adaf6c7416b7e8944dacb1584730a1187ebea12f9fe46e6d74ea02fbc3
SHA512
665b03bcb5dddb81a854bc9755cf5aa18345887dedea87a7b1f5e2f9e8becf42367326a3926e20d42c96e622e2e46c8f56ea9f7a86e813612d829660bdad3d83
SSDEEP
384:nG3yNbH+yrSOSSHLXM5HUDEQyBF6O6I4eRmq:nG3yNRrpX3QF65Iyq
Checks for missing Authenticode signature.
resource |
---|
f826efa92182dc879d528240ce62148b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ