DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
843fdda480b67f1157bb28a0d26ec6d0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
843fdda480b67f1157bb28a0d26ec6d0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
843fdda480b67f1157bb28a0d26ec6d0_JaffaCakes118
Size
115KB
MD5
843fdda480b67f1157bb28a0d26ec6d0
SHA1
fe9f2de5bfc4f8d7d5d33222f750f22b192ef396
SHA256
c68cc1818834e45bf33b6bd7a69dc51065f7b372a85bfee79f7952e09ddc86d3
SHA512
9ab50752923505406ad8c81a209f4465add897796d8fd6c2654aced1f3927aad835ac41b64c4be11543c3001ce98946830b9c5373b6fc4e3f2bf8bb6ecf82be8
SSDEEP
1536:QiNoxHjyi9+88+LqXChPXf8G/HWgth6WzoxZUbvAwUYBW/h76U8c0CoBHxuO:QUoZFK+LvhPP8GFm44N16Jc0Rxd
Checks for missing Authenticode signature.
resource |
---|
843fdda480b67f1157bb28a0d26ec6d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ