DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4249e6591012805c368e77abfe015ef2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4249e6591012805c368e77abfe015ef2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4249e6591012805c368e77abfe015ef2_JaffaCakes118
Size
36KB
MD5
4249e6591012805c368e77abfe015ef2
SHA1
73f6858ecf0ce3dc82bc68ebb1ef24d83ab42a0b
SHA256
c77e26071777185e20116f7e6dfef965993a98242b3bfac1cc0f1439a9d012f3
SHA512
835841ea4c0df0d4eb7aa10fa8c00324be4a4ca6de45b7b0edcf9c70ee8508210f7ff2d5d5663330e6386272e054c6ef57c7dad22e576e6cd99c7f5677701e43
SSDEEP
768:qRxY/bealJhHQjtOqA3ROn4OnRY7pLp98aka9EHHuMj:qrihwjtOqWOnLnRIpT8naKHOM
Checks for missing Authenticode signature.
resource |
---|
4249e6591012805c368e77abfe015ef2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ