DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9739881436e8281e4546c19a68a27622_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9739881436e8281e4546c19a68a27622_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9739881436e8281e4546c19a68a27622_JaffaCakes118
Size
409KB
MD5
9739881436e8281e4546c19a68a27622
SHA1
d1ba85ef67c0b149ce1bc1032bfe8b6282a9021e
SHA256
9123b20bbf65bdffb8859b545befd72da50e12a15578fe5a89defe6b315748a6
SHA512
e0f5aeb5a9cb4bc254b07afaacf46173ab0aaeb1c4615538099098f078049454fd331b59e81607bd308bd58ba470e92691644ce1b3d20e6753e146cfa7172e8e
SSDEEP
12288:IPE97KChNOnbTzquTt4qYzpN769N5tRTItWIq:IPEhKChNOnbTttoNUPoq
Checks for missing Authenticode signature.
resource |
---|
9739881436e8281e4546c19a68a27622_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE