DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d28bdacf9b3ddd38195e3bc9abca6a4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d28bdacf9b3ddd38195e3bc9abca6a4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d28bdacf9b3ddd38195e3bc9abca6a4_JaffaCakes118
Size
96KB
MD5
3d28bdacf9b3ddd38195e3bc9abca6a4
SHA1
26d1df790f673494acda1b0946e8091942a392da
SHA256
2f451b1fe28060e8c6992b8efa7948f4cc963dbd7d6f2395a31488899e84ed1d
SHA512
36053e24241f9d5a93ba214b675033bca5c8fb1307ee04ccf49e11e21f6e46a01dd8f876e4b483fd973d7153985a97a20f3ce68504c08e169d1a584a1e5f89aa
SSDEEP
1536:luZeAj1jmL7mskH+pHMyXkuePl6TZeykf1jr9MzrIUrD2g8Jq2zNBFSo:luZeAbskHwMyUue+4yE39yrriTXS
Checks for missing Authenticode signature.
resource |
---|
3d28bdacf9b3ddd38195e3bc9abca6a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ