DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
71abb318364cecd0d4f0be015fae49ca_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
71abb318364cecd0d4f0be015fae49ca_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
71abb318364cecd0d4f0be015fae49ca_JaffaCakes118
Size
81KB
MD5
71abb318364cecd0d4f0be015fae49ca
SHA1
dfe8bacc8bc003781180885482d2f8805c71938d
SHA256
561f307910a578483150e15235b77e81b80dc64e2ec63cf0797429ccc9778ce4
SHA512
d2087117c6eafd4d877e09898f4f8abf8eaea7a575185008ebb868a6022fb7f7df6e86fc2a27dd9baffe1ec5797fc0e2283a90793da0699408eefd77c628accc
SSDEEP
1536:F1RgW8uN6qctUDqHvSLjmYCG5sqrdiGcPe6yfb8YOYCG5sqrx:F1jXN6qKUmHvSmMI8CY6Mx
Checks for missing Authenticode signature.
resource |
---|
71abb318364cecd0d4f0be015fae49ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE