DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
69d4782a95f8328a8c99bb5cd3f892f2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69d4782a95f8328a8c99bb5cd3f892f2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
69d4782a95f8328a8c99bb5cd3f892f2_JaffaCakes118
Size
168KB
MD5
69d4782a95f8328a8c99bb5cd3f892f2
SHA1
be4c19043babe3212e074c1b09419da80b4d32cd
SHA256
0293588fac468a7bd6ed257226550ec493b1197e83dc30feae635623b314e299
SHA512
1e1619ec1e31e79d834e9522cea8fe7118f04d01e0423f9fcb5159d5c57d94db10436c996958b0db7e154e9a794182720bc6c363ce569bb63ff8d738379cd32b
SSDEEP
3072:fuELj2Jlu92WHULb9xRhBdiFeYC4zwFv++P6KcoZ+G:2EWusW2xnB08vHFPP6Y+G
Checks for missing Authenticode signature.
resource |
---|
69d4782a95f8328a8c99bb5cd3f892f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ