DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Run
Static task
static1
Behavioral task
behavioral1
Sample
43ea07f3273d06b5a02abf8a8c3fb54b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43ea07f3273d06b5a02abf8a8c3fb54b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43ea07f3273d06b5a02abf8a8c3fb54b_JaffaCakes118
Size
72KB
MD5
43ea07f3273d06b5a02abf8a8c3fb54b
SHA1
192488849fc0d2f6c820b60aff26d99bbc9101e0
SHA256
76fd8b988c6f113fe1a83b3818619c6f0455c091760681da3e40222fc7bd39d8
SHA512
808a1cd93b80ad8e22f7525838a9f0333353c5d8d41cc10a5dc05ee017c170f87d0135ed704c2400b11232c4655beed7b5de197f33028d493bd5ad4554c7995c
SSDEEP
1536:hArtw6dmj5rl96I2n0UaaAe6VfTQXeldsF:sgjw0UuVfTQXeldsF
Checks for missing Authenticode signature.
resource |
---|
43ea07f3273d06b5a02abf8a8c3fb54b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ