DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
08ce01618f503e9f3020adc38e826ffa_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08ce01618f503e9f3020adc38e826ffa_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
08ce01618f503e9f3020adc38e826ffa_JaffaCakes118
Size
416KB
MD5
08ce01618f503e9f3020adc38e826ffa
SHA1
33736ac4d4c56a9da6bcc37cd1b1976b2457bebe
SHA256
6fc66f881b272e9b69cb71b99ddcca12179f88127f858cf6804cbd011343fcc1
SHA512
24c97f4412c0766ad29b110fb1e920d7ad1cdcf51ffd776b804b020ebb7f06ab8a850c4e1df983c78ab9f6e091881b38501de40684083bc4a32e73559e8356af
SSDEEP
6144:qtLOqVQYSPEl0M4VgW9gj1pbTsq7pda6SxQTBJv1dRF+r8E4hpj:MO6QYSPEmMtpbTsqNkxQTrv88E4hpj
Checks for missing Authenticode signature.
resource |
---|
08ce01618f503e9f3020adc38e826ffa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ