DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d05fb215ab898ef944e37924dece0f21_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d05fb215ab898ef944e37924dece0f21_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d05fb215ab898ef944e37924dece0f21_JaffaCakes118
Size
72KB
MD5
d05fb215ab898ef944e37924dece0f21
SHA1
2454c166e07f4af52b263ca4e316726892dce5e6
SHA256
b8b0a18482e24cd5f19d085c1ceb567c538fd9695784f377461533765a1d6fd6
SHA512
8a9a0776e5964ab9c136104bfe5a7baf19a658a196faf5ae8245510cdc3d865041a4b0e03b7d6b07353ae7e2fc567deafffd9be1083a752fbf14d090f3f97b08
SSDEEP
1536:MB1Zre+lfRw5HtAbl5Hq2kjA19Z+kXubNhhyHD/4nZbACNbx36nLhyHD/:KM4ZWHtel5rk019ZjXubNhhyHD4bNbxp
Checks for missing Authenticode signature.
resource |
---|
d05fb215ab898ef944e37924dece0f21_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE