DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d6c69f2ba2aa2668f622efbf0631145d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6c69f2ba2aa2668f622efbf0631145d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d6c69f2ba2aa2668f622efbf0631145d_JaffaCakes118
Size
104KB
MD5
d6c69f2ba2aa2668f622efbf0631145d
SHA1
effbc604f6236fbff75f420032631ce026c2c196
SHA256
285af2b9dfe1e4637e1250877d00c8dbdd130362ba5c336a7dcead70cf9e4bb7
SHA512
c23cd68e098641016cac8e2525b62e95d6af43b929e2aaa8e1c9a6035dc9473e8ae4de9a1aa0ec794e9c154eabf963f5638c94fad5c46426a18207f688591cf8
SSDEEP
1536:I55CMiWOlcxHZ5GA5Y4bpeodMMHysAu6e0wbvly36l2EEkQD8oKvqlyl7miF:I55SWOyx5z5Y4TvHya0OlCEIkubuR
Checks for missing Authenticode signature.
resource |
---|
d6c69f2ba2aa2668f622efbf0631145d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ