DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ef43a8990f2edff66f348d526128c9c9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef43a8990f2edff66f348d526128c9c9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef43a8990f2edff66f348d526128c9c9_JaffaCakes118
Size
109KB
MD5
ef43a8990f2edff66f348d526128c9c9
SHA1
c5c7b50bad662fa244b800b55f1fb255e584ede4
SHA256
2c5cc263c98b5db16907c72a6960a6a1f068293c8ad23d747dbdb96134f05d33
SHA512
2d98406cfa0893c6ca2935bd882dd6997a97642264c9866b8b8ac3919a16429d87743d27bc8d683c914a1a7831d7e0254db0e18ac2daa5eeaf7b8f46d10b1172
SSDEEP
1536:akd3UIwm5LE8OjyZTIFKPFFO/BVnenQOQ/u4RUcTpWrulf23FrZyRnW:NhUFm58jyD0BVneQ+61pW6lf2V7
Checks for missing Authenticode signature.
resource |
---|
ef43a8990f2edff66f348d526128c9c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ