DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2d32e67a55e5c24a1e4de4620ab6c254_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d32e67a55e5c24a1e4de4620ab6c254_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d32e67a55e5c24a1e4de4620ab6c254_JaffaCakes118
Size
149KB
MD5
2d32e67a55e5c24a1e4de4620ab6c254
SHA1
c0a452881ebe4eb027040785f9f1dc1df68b5604
SHA256
a3e13df53d6772b1b27b02fb163e010646eb7b4ab2e395b41c7f217ad32cd41a
SHA512
e67259f0cf7684d7b632e8e8850f9ad68e5b7e526c72bb8c3558d948ad9dd04a0be77c6b5130351a02b04fed7a1cf0a28345642b31c11038b578cf46bb3f03b9
SSDEEP
3072:2WVE/OQttkApqHZL5PUN/7RCmQIjgPDgNcWp:2WVxWK7d49LQIMLgRp
Checks for missing Authenticode signature.
resource |
---|
2d32e67a55e5c24a1e4de4620ab6c254_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ