DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff9a3b537aa4fa082302c6ef3c914ea8_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff9a3b537aa4fa082302c6ef3c914ea8_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
ff9a3b537aa4fa082302c6ef3c914ea8_JaffaCakes118
Size
115KB
MD5
ff9a3b537aa4fa082302c6ef3c914ea8
SHA1
fe8ec800236986878d8a4c13bc0781d3216d14f8
SHA256
6bc4147a00e92fb26fcb792448c18c20df93bc3b4ba25da2e008c181b72a8c34
SHA512
81ab139de221d108741bf9b3f068cab2ef71c705324faa2243ced6e3e7e3e3d52e436440dc354641a416a9b9fb07790901172f9044e8a1bb7a3a101966ea9773
SSDEEP
3072:a2sJpQuF9DriczH/jef5IIeKard6LcNh2:6Pb/D+cbLytaR622
Checks for missing Authenticode signature.
resource |
---|
ff9a3b537aa4fa082302c6ef3c914ea8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ