DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
046099d18f297006a7ab57b4639125a3_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
046099d18f297006a7ab57b4639125a3_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
046099d18f297006a7ab57b4639125a3_JaffaCakes118
Size
5KB
MD5
046099d18f297006a7ab57b4639125a3
SHA1
eb9445fca3e921ef04513d5128900fda32e25897
SHA256
aa69ef78ab7b57fd5afde0cf395b6b805db32d5c180b5bfe022a1cd2bd0555b8
SHA512
e2a883ce9d2dd374f6871b3efde74246e245d88118d271213c9fd476a48f2dd668eede913af5352a330560eb434fc9314dcc6ac710150302907f7451dc64dc2d
SSDEEP
96:IH71hJvtWeG8mljmfB4JS59STKQAK6Wcfnp3dEWPT0l03CGz+WwX:UhJvtW38mlj2BPShAK6WYpmW7F3Cy+W
Checks for missing Authenticode signature.
resource |
---|
046099d18f297006a7ab57b4639125a3_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE