DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ea2637886c7384293f9d26e3c21b682a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea2637886c7384293f9d26e3c21b682a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ea2637886c7384293f9d26e3c21b682a_JaffaCakes118
Size
120KB
MD5
ea2637886c7384293f9d26e3c21b682a
SHA1
2a18d210568828eeecac53e3bab05a857fe72403
SHA256
7ca90300a06c2698c823d0c8eea43847209123f9092569f3fa12f45509775ceb
SHA512
e0970f1f4583ee047ab4ebca38924735b31da3bb824ef5433fe402958511b217e9e50e07fe3ababc6372d2c050fe4e9c2b730bdc6f5f735d4acfb0de9569b6a9
SSDEEP
3072:MXBi3i9yL5im0pnM408MT9+UML1OKI0qw2NIpy:uw0vMiMTsU+qx
Checks for missing Authenticode signature.
resource |
---|
ea2637886c7384293f9d26e3c21b682a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ