DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff1348f18346203b3eb9af2f3bacd06d_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ff1348f18346203b3eb9af2f3bacd06d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
ff1348f18346203b3eb9af2f3bacd06d_JaffaCakes118
Size
40KB
MD5
ff1348f18346203b3eb9af2f3bacd06d
SHA1
6b565725908d31affcf3bb82828a9d503d5518a8
SHA256
20bc68eecf41fdc07426e7c84664b7a719f226bdf5f56ec241a7b8612d33ce7b
SHA512
315898511e2cc25f582c0be57e8fd47a556b2f39253738d7c7d18e3a53c9188622a7603667de788e5b043f6dac092dcccd75ab20eab0fa29d2e757cb2236e34b
SSDEEP
384:SsZXx+yDhJ85yTLoMShrbeLmDoxIAOba+pA6rixXrTQZ4KYJLtg:Sshxlg5YcMWrKLmDodCXBu1rZDL2
Checks for missing Authenticode signature.
resource |
---|
ff1348f18346203b3eb9af2f3bacd06d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ