DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
28137a1f93c14e282d99e690dddf62be_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28137a1f93c14e282d99e690dddf62be_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28137a1f93c14e282d99e690dddf62be_JaffaCakes118
Size
80KB
MD5
28137a1f93c14e282d99e690dddf62be
SHA1
74b04b79a917ee2d2859fab7a946d0d041734087
SHA256
2beb168dbd445f1825858272c1123d141f1650567cb939f09dda865b33bf43bb
SHA512
339b557aa17249b7dcba76e9a7832783d6bba49bfcd486ed9c4bf41d93f96fcaa28cd47465325ff569fbf22cc5862bbab0b18e4b96fb87955df6b1d95f84371d
SSDEEP
1536:LCGblK5pak9Ulxv70bfRS/MGBZkam4FVSzQ6FxOLmx1am:zblKyk9wd0bEEGBZZHj62mxg
Checks for missing Authenticode signature.
resource |
---|
28137a1f93c14e282d99e690dddf62be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ