DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f833c307172bbc30dc43def3553d055d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f833c307172bbc30dc43def3553d055d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f833c307172bbc30dc43def3553d055d_JaffaCakes118
Size
29KB
MD5
f833c307172bbc30dc43def3553d055d
SHA1
e66c29d7b5215d31363fae8448d4c1a1a85d2a97
SHA256
559e38037602d262c0acdf21ed09a13bb903b7659ebeefd0bc1d4cf52b5d3e69
SHA512
d051aa3a4543fb441dc1d7ac0dfd6a25e3b7b29da93ce212e2654b20c8535748d45a694684e38dd8088e7d7bb81fd5fef9b01a7d5672fa1565a1d1cb32b3c2df
SSDEEP
768:+jqSDlCrPkJ4NJaRGWybOQZNwMJ4VRu1Qkr9:+DDlz44GD1akp
Checks for missing Authenticode signature.
resource |
---|
f833c307172bbc30dc43def3553d055d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ