DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5adf11ddde695e746bd0115e16654e0b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5adf11ddde695e746bd0115e16654e0b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5adf11ddde695e746bd0115e16654e0b_JaffaCakes118
Size
74KB
MD5
5adf11ddde695e746bd0115e16654e0b
SHA1
80c434da1238bd91ba33040db70c77adeaadb825
SHA256
bb4fcf49c44eb76f5fc9bab8a4d72b1fe8793bb0c89335fd898ace7030499291
SHA512
7a46781d99d181fe56b27c700c0abf160313e9c97cbaa57cc562925725f52407374a539a57213f56a44f963da64723b83cfc6c57feb3a16aab5ddbc7983e3559
SSDEEP
1536:nvIlSKCVMzFTc5ZQ9Q9MqScaXyA2nfU8XWi:nvZFVM5TW6uM3nXyA2rXWi
Checks for missing Authenticode signature.
resource |
---|
5adf11ddde695e746bd0115e16654e0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ