DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2f1c7747221a91129f8369e95eceaa6e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f1c7747221a91129f8369e95eceaa6e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f1c7747221a91129f8369e95eceaa6e_JaffaCakes118
Size
104KB
MD5
2f1c7747221a91129f8369e95eceaa6e
SHA1
9bdb4bf19c9f74d941c74b3c37cf00f56a4262ab
SHA256
67674fea683674936527b3005fbde4d1b36a742d6d79c67e93b9cbbfa663a12a
SHA512
eab04a59e0464ab32671ac00a1bf190272397a4be96b52a3c78cd97ab936c634ccd7cb24f7ed3ccb4365826c1f6518fff177dd2c1d21c917006b0546b5bcf1d2
SSDEEP
3072:o1K96yblCTyeI1Pq/g42qN7kahfEIdpUGOlj:M+6UYhI1C9Fpv3s
Checks for missing Authenticode signature.
resource |
---|
2f1c7747221a91129f8369e95eceaa6e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ