DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
67059064820608163ea66ea9eb5a72f8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67059064820608163ea66ea9eb5a72f8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67059064820608163ea66ea9eb5a72f8_JaffaCakes118
Size
56KB
MD5
67059064820608163ea66ea9eb5a72f8
SHA1
c5fa4685ff892ed3761c7e79eeb63eae99cafc5c
SHA256
bb815b2a7d35c9f68c5557616d054a926b5185427b319fd934da76c89ccaecc7
SHA512
57e9de1f613eb31f850414dbdf264d821dcb7a0a762c74b8de49ff496b023a0adac71c150fd93addfe6cc547fe1620a73c9dacfd8022ab01cb97ad8257fcdef6
SSDEEP
768:bbCd+OYrVf1VSqLj5ift73OjR6lkIX0gyDqhQd3VRybEWbc3D:3C4RfU2QtLMRckIXdy2gAbEWK
Checks for missing Authenticode signature.
resource |
---|
67059064820608163ea66ea9eb5a72f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ