DllCanUnloadNow
DllGetClassObject
Init
Static task
static1
Behavioral task
behavioral1
Sample
1933322a29e0ddddcf11f9d0dc94f40b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1933322a29e0ddddcf11f9d0dc94f40b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1933322a29e0ddddcf11f9d0dc94f40b_JaffaCakes118
Size
121KB
MD5
1933322a29e0ddddcf11f9d0dc94f40b
SHA1
f74e3eca133c973bd053c9acf48dfa5e7c9b0202
SHA256
040b87e9338e9f0764a4266eb02911ccc4ac20a2f90f951a00e30031b62afec5
SHA512
09a7346388a9777eed65b2305f788fa8f051821d12d2703242c20e9c6233e5159601ee040b5ffd809857d3b2a3ab04c1222ce50eaf4bf7ba602b690830a36749
SSDEEP
3072:Fq+CqUZXlbYp9fut5V2V6VFvWExUanwpRWV:dCqUjbs9fut5QV6VFeExU2
Checks for missing Authenticode signature.
resource |
---|
1933322a29e0ddddcf11f9d0dc94f40b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ