DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b6751b4692577ec8cc76a8d2748facbc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6751b4692577ec8cc76a8d2748facbc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b6751b4692577ec8cc76a8d2748facbc_JaffaCakes118
Size
132KB
MD5
b6751b4692577ec8cc76a8d2748facbc
SHA1
4a31079e8b0fdedf2359a4393e0d0dd1d437bc44
SHA256
0500f702d1d73e7dfee93c3d17ee760f324e51a7c630b2f8cb9d5e0142aab29c
SHA512
d0710b10080350008f24368b06e07fe19bf8a1910a07bbab01c6b1f99bebdb4f82474594cc32304c66e560ee0c414a74dac8bc6a333f81919fbc0b1189aa8ce2
SSDEEP
3072:uxWe8I/DhvdcXI089x9LKrwofECJe04aHeLQSwhYam6qnhf:f61vCXhIx9LKrwofb404qeLQSwhQV
Checks for missing Authenticode signature.
resource |
---|
b6751b4692577ec8cc76a8d2748facbc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE