DllCanUnloadNow
DllGetClassObject
setup
Static task
static1
Behavioral task
behavioral1
Sample
16f502f7e48bec3fa868b4d9caf9989e_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16f502f7e48bec3fa868b4d9caf9989e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
16f502f7e48bec3fa868b4d9caf9989e_JaffaCakes118
Size
37KB
MD5
16f502f7e48bec3fa868b4d9caf9989e
SHA1
527c905e4ed9e0eef5df089fe783ad36cb240ab2
SHA256
cfe4d0861cd6203498047c3cf9dbb6e4ce70c06df42df3d973e8914a6060b7c1
SHA512
9c0514af46c0a6050d43050bf35f95482e297537a108289bc1261fd2c2b1a33c2c54c2d94b0eab5b2979d235017afd39e0a3a3e186c53091c360a5e9bc123ec6
SSDEEP
768:C2BtqeB7HG21GYESTOqxiFSWiURd6Ysm+fVe6IB4wkr0n8:C2BtzaPYfhxg09fVe6ICJI8
Checks for missing Authenticode signature.
resource |
---|
16f502f7e48bec3fa868b4d9caf9989e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE