DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6f9a3b14d810970e4a78234b18eea8da_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f9a3b14d810970e4a78234b18eea8da_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f9a3b14d810970e4a78234b18eea8da_JaffaCakes118
Size
121KB
MD5
6f9a3b14d810970e4a78234b18eea8da
SHA1
4392d92bc05252f59cb5c84d9ee112039fa52326
SHA256
7e757b5c7f1be593a67c7255e15c639176539c64bffd0c704670dd2e279394c4
SHA512
364c0d126b7b3f70d15bbf19573d12a9149131f5b71f87069a93ad829544e7d1edb9317045d0e01c410b72321674d4021958ef268c919e4542dee06f98b0f275
SSDEEP
3072:kh3FBPUM1c2RQxRMMm9mw5X60W8E16l6FQF:aFqy9QRE9308O6zF
Checks for missing Authenticode signature.
resource |
---|
6f9a3b14d810970e4a78234b18eea8da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ