DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b382d8674dadbb56ae90b8ee58fbe883_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b382d8674dadbb56ae90b8ee58fbe883_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b382d8674dadbb56ae90b8ee58fbe883_JaffaCakes118
Size
632KB
MD5
b382d8674dadbb56ae90b8ee58fbe883
SHA1
b427ee027bf144e7dfaa79a30af416a88f936ad5
SHA256
ee0cb9ec976224e1d19b6444220596251fda6c0302d2d78216fd9f90412757f7
SHA512
6ff618721fcb8ab6b5806f2453c547d2eb0dc407199b31e440720a86765445b350ee283688cce009b531da12842f44cf0620e3b4e23949804c18f9035428f719
SSDEEP
12288:UOf1lXy2x7T+mEezYOdDJ+46dF4B3g6s:UOdlXfxWm9zYVtdE3g6
Checks for missing Authenticode signature.
resource |
---|
b382d8674dadbb56ae90b8ee58fbe883_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ