DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3b00a321945ef67c7427520bca77e9e8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b00a321945ef67c7427520bca77e9e8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b00a321945ef67c7427520bca77e9e8_JaffaCakes118
Size
312KB
MD5
3b00a321945ef67c7427520bca77e9e8
SHA1
d55ca2fcec3cba9e41a29ef9f404c6a98bba42e7
SHA256
0f282d8837242cadabe2875f583661ea3569beed7f04bd6f656ac87d1219e764
SHA512
20214b5e4fd297b5262b34b28b012c1079ebc29ab635f47179b6dd9d3c7905e79a42acfa4198da3203650fe90617eb5167709b77f6edd64f75bc9dc7bde725a7
SSDEEP
6144:aK+YzD3W4Uwc4fEGgUfb0c4cqtdUHfYnkSIhYL4:aXqLd47GR0AfYn5Cr
Checks for missing Authenticode signature.
resource |
---|
3b00a321945ef67c7427520bca77e9e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE