DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aa38f94a5a0a2f91d3f1e7b0d6e8f091_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa38f94a5a0a2f91d3f1e7b0d6e8f091_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aa38f94a5a0a2f91d3f1e7b0d6e8f091_JaffaCakes118
Size
92KB
MD5
aa38f94a5a0a2f91d3f1e7b0d6e8f091
SHA1
6931dd894a007d05cf632aa95bcbe8add26ae5fe
SHA256
6ebf98e588c18a339cd31aa434955764cb324fa6133f473c2b3d91ee94839763
SHA512
f237eccac9cf2773de80c8822720b633c39d6125a2a7d543ac53858d95b60e70213ecf1c8622b0db3a0abc48c7c999c81b8bdae1c886a8a15d63876ddf12b701
SSDEEP
1536:ndGdS/OQr/EjUlZc1bVrgSAi+83jliSxPZe+W1NtT66ebQ+83jli:dJOUEW0nBDPxPZe+KXTHebQD
Checks for missing Authenticode signature.
resource |
---|
aa38f94a5a0a2f91d3f1e7b0d6e8f091_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ