DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ef53ae5095ff826f98b48ade732016a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ef53ae5095ff826f98b48ade732016a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ef53ae5095ff826f98b48ade732016a_JaffaCakes118
Size
156KB
MD5
3ef53ae5095ff826f98b48ade732016a
SHA1
317690a8e96f0d0e474d30a172bc0f1b209f0dc4
SHA256
8b78a11ebf62775344d77d19d313245fdd57fe302a1d5724f2477af41376c6c6
SHA512
75abb5d22f73f957306c2e38d10b7f5c74fa5e4156d4d4bab8138b2e730f6fa5bff928caa2fbe8e46fa91c536a36028824f26b2a6cdf5716d75d4ddd8cd24317
SSDEEP
3072:eIfi6M+xK/py1n/qPsGmTQzY441L+O/4MPR+fNy8grd0rS4D9ZyOtuV5fdfCEjGX:eN6M+xapy1n/qPsGmT0OL+bkR+Vy8gr8
Checks for missing Authenticode signature.
resource |
---|
3ef53ae5095ff826f98b48ade732016a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ