DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
42e8c58823830436c94c89fe21556bf7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42e8c58823830436c94c89fe21556bf7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42e8c58823830436c94c89fe21556bf7_JaffaCakes118
Size
86KB
MD5
42e8c58823830436c94c89fe21556bf7
SHA1
acde5815945f65b2ec924bacd5fc33e4b9d5d62b
SHA256
2f740333c4f1feae8bdefac9f0421a9972be8db91dc1838ef403dd5c07bf9ba7
SHA512
348327a183138bdefa060ad117314992c3e26bbf302d3ce44f957cdccda350cea8d39d2cacd62b89438d2546d8b91a85ec781339b3388bd5a98f16de22fe7ee1
SSDEEP
1536:weWBG7vkpVf7s9ss3yxv64Qyrj/7atpn01McW0k2Pu8j1CkB7tuy42XVoAp9QuFl:weWBCiVjs9ss3UDjGtpn0Sc60/tD4KoM
Checks for missing Authenticode signature.
resource |
---|
42e8c58823830436c94c89fe21556bf7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE