DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
df840c706300d238ae0c5c58ba8986b1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df840c706300d238ae0c5c58ba8986b1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
df840c706300d238ae0c5c58ba8986b1_JaffaCakes118
Size
187KB
MD5
df840c706300d238ae0c5c58ba8986b1
SHA1
dbb77f3baa63db2294fa33d4062a14f0c89b6d36
SHA256
1523598624f81bcfabc4e64ba75351c1bfab3c1685ce4072d33061ba05a80a24
SHA512
f0c247f268b281fc2539ba2b5320b196c45322056f18f81f086325c826de5ee88befffe7a3557f0ed03572df4a6e8bf5807afb17e3ad7ef78ab9c64f89153321
SSDEEP
3072:sHtwW11Azzw7PiAMnzrymejChNtw6fqjw0Mr3yHpW9LhXPVMp2mErtRmLOBIZ:c2W1jil6NjCrq6R0AyHpeLhfVesRmyBg
Checks for missing Authenticode signature.
resource |
---|
df840c706300d238ae0c5c58ba8986b1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleHandleA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE