DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0211bd999bcea6cb6ac7438230380e73_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0211bd999bcea6cb6ac7438230380e73_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0211bd999bcea6cb6ac7438230380e73_JaffaCakes118
Size
84KB
MD5
0211bd999bcea6cb6ac7438230380e73
SHA1
39512e0fb282efe9f1801e704e680b83e6b02cfe
SHA256
38ff8705ab33ed383b1298f91f615a8b36b60bae2d5a4bc95b11b570c718b394
SHA512
bbef6f290e0ed6dfba29d1124d889ff07b83ce632d1a8cce3315a2552bcd9d570c30456203eb01b970cdf468c1d831c717a8262780f68f0ce26181aeca42e5b6
SSDEEP
1536:5FYsSliAx4P+oPYykicHQZfiJ/Mw/crnYx1nU0MGznk1NgvMw/cr:hWfamMeBHMPrU1YGzsgvMPr
Checks for missing Authenticode signature.
resource |
---|
0211bd999bcea6cb6ac7438230380e73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE