DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SpecialFunction
Static task
static1
Behavioral task
behavioral1
Sample
da6f0c9c56942c16c81f481062bda0a8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da6f0c9c56942c16c81f481062bda0a8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da6f0c9c56942c16c81f481062bda0a8_JaffaCakes118
Size
424KB
MD5
da6f0c9c56942c16c81f481062bda0a8
SHA1
b5a5714de4a7ab71c75c20e33ece29df10dac466
SHA256
647ecedb0e5e4d56c9e19283fd994d34943e62b6b94bbaaeebfd015e1acd5af9
SHA512
46410f9ea0b8438eb1503bd678ced6300996e92b4bcdece2cfa46f397e2ab6e70b253326b377dbb959281155cf66b730cd801e55cd5eb447f465dcd72e1be846
SSDEEP
12288:B1tHds+cI9CDIcGmkTXQvTEup+HmLlq8BHt2zJNmH:B1F7cKC8cHkD0Jlq8hszY
Checks for missing Authenticode signature.
resource |
---|
da6f0c9c56942c16c81f481062bda0a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SpecialFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ