DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8ab10f2ca9d8cdecba149ab1ddd0df8c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ab10f2ca9d8cdecba149ab1ddd0df8c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8ab10f2ca9d8cdecba149ab1ddd0df8c_JaffaCakes118
Size
44KB
MD5
8ab10f2ca9d8cdecba149ab1ddd0df8c
SHA1
bd2858f85b19a56abb77c3e81e69be62e14851be
SHA256
18e55075a3e63a43a04288c0b58d9293031f3cf95e23e0d8cb0e4145d2aeaff4
SHA512
c107a03449e2037cddd8011b2f059242dde5eb48c0291430a5eb95e77e7618b7a43dbd637d85e8ccc27474bc01b4d75ed79e6b0621c3fd67076fbee260513a8c
SSDEEP
384:C3LPemX4s8wLE6xtqZWTEPNRbeyRYUolmII2r/MsgKh6xv5gR:0i9cntqzFRTYUYIU/qyQ+
Checks for missing Authenticode signature.
resource |
---|
8ab10f2ca9d8cdecba149ab1ddd0df8c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ