DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
PreExec
Static task
static1
Behavioral task
behavioral1
Sample
a14e232b0942c4edf4ef2ad3c41a01be_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a14e232b0942c4edf4ef2ad3c41a01be_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a14e232b0942c4edf4ef2ad3c41a01be_JaffaCakes118
Size
43KB
MD5
a14e232b0942c4edf4ef2ad3c41a01be
SHA1
b7b17609d1b7cf6a6dc7be2b8e2e7f2e73369ee1
SHA256
6c0b282f404a38d9f162785f5f7b0f02a37192498411c41053bfb66360685718
SHA512
d605e6bae642ce6c903ae876474bcc796744647b722c780a5a959fca6854d7b6fb07bb4cf183b99c363064c83790bdb2a2308c602f1eb196abd78d8502cd36e7
SSDEEP
768:7sVuC32YJF3G1qu4j5gJFclgQDuvgL3zo7u6xgnAL6F8vLWV0Vf617BIxrSXwz:7s537F3Gh4OTcl4YLUPynAL6FDe9617I
Checks for missing Authenticode signature.
resource |
---|
a14e232b0942c4edf4ef2ad3c41a01be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
PreExec
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE