DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
947cff6d44cc585b5d537a19d29a756d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
947cff6d44cc585b5d537a19d29a756d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
947cff6d44cc585b5d537a19d29a756d_JaffaCakes118
Size
124KB
MD5
947cff6d44cc585b5d537a19d29a756d
SHA1
8394f4e0985ec5717494b035756ffff6e07761ba
SHA256
5d0f23d92d6c67aaea7c42974ddba45f3dc6ae91b3c7dc5bdc206b0fa0412b36
SHA512
765ba9fd10fc810cee40bcf0254872839295c27e07e9fe303fd9f56165cd4cc51e856c3ca765060e223f796f642e9ce66055b7aaeae8bb5f66a527b668b1ec52
SSDEEP
1536:jZVvccmB6yYHWzLcsqYBvAn+WA/OKapuc5WcrbfKKk3mbxzLYXB:jgtB6NWzLLD3RW1Mq9rDE3mJ8XB
Checks for missing Authenticode signature.
resource |
---|
947cff6d44cc585b5d537a19d29a756d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ