DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
704ca8067adc96b256ea89f4c6f9c2a5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
704ca8067adc96b256ea89f4c6f9c2a5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
704ca8067adc96b256ea89f4c6f9c2a5_JaffaCakes118
Size
39KB
MD5
704ca8067adc96b256ea89f4c6f9c2a5
SHA1
5dcbd27119d44b8e17743eec7e363b582b320e5d
SHA256
35eac7cdb8a0587605bec2f90c4d5e38fb9a4f75dcc9bf5380c67eabee09d95b
SHA512
c5ce6626ca1e47d1cafff5f5ae3fbfe9cd31661de4288c8335b8dece7d7fc04aa9eb3ab91527f40f7220ffcfefd43c678c1d5b5498e9d0b5ccb3067113d08fe2
SSDEEP
768:L/0HYfogFh7X5aq0vPdz2dcx64KsQG2FD:L/wOPb7XkxvPIWxTQzF
Checks for missing Authenticode signature.
resource |
---|
704ca8067adc96b256ea89f4c6f9c2a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ