DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9584362b0499a453b2de6d003049a408_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9584362b0499a453b2de6d003049a408_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
9584362b0499a453b2de6d003049a408_JaffaCakes118
Size
56KB
MD5
9584362b0499a453b2de6d003049a408
SHA1
6c9a03e3f5ab9b9bebd88d92025c2601e7b02f86
SHA256
6e0ab129486ab239bebc72a5c628dac8cab6578046ef301bf165ca0204fa688e
SHA512
202f7befeed33e4d4648a4d43a4ce8a575028a5c85cb95394543b090450ebbea7a79d979f610934bddb55ef246b90f170d15e5c32a2bfd4f22d352795eef0bbd
SSDEEP
768:h36aCDX7yPBw7Mc2RaoLwoy9IolYGu0+CsL3jsVVOpM3BRQY:1OeBw7iRMoyKiYGu5Cs3+fZ
Checks for missing Authenticode signature.
resource |
---|
9584362b0499a453b2de6d003049a408_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ