DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f8a444bccfaaba96b56e6fd50fb79170_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f8a444bccfaaba96b56e6fd50fb79170_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f8a444bccfaaba96b56e6fd50fb79170_JaffaCakes118
Size
86KB
MD5
f8a444bccfaaba96b56e6fd50fb79170
SHA1
f3c3ab9d41405b1428e7e91eee8bca00f5d7a31d
SHA256
d0df09c86813940408376fc164cef1e041d9a29d8fd6221121e1f6ddff48fe64
SHA512
ee0a1b5eb0962a36cb9d4f058028ed02fb84befc9d28a072c88605f9db436b22ef8461e7f3e1bf5f75ed68b717baf22454d314e296c40c0b22113f1a5e03d1f9
SSDEEP
1536:92Ml2YEyJxm9pPVylsRP8x92iKuH6FN3KkTUfGOhYN6v46:8+2YEixm7VySP8yih6CbYN6v46
Checks for missing Authenticode signature.
resource |
---|
f8a444bccfaaba96b56e6fd50fb79170_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ