DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fb36202fc19dfd9950a2002d87016f23_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb36202fc19dfd9950a2002d87016f23_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb36202fc19dfd9950a2002d87016f23_JaffaCakes118
Size
409KB
MD5
fb36202fc19dfd9950a2002d87016f23
SHA1
4c434bd120c920cec1c9dfd2465193b8379387f4
SHA256
1d483aeaf909309bfc022eeb5867ca4ce7f505afef183f3de7a4b9d64dc95ef8
SHA512
e12646e51517a8a28df7700178c902e7b1b7a5eebdc31ae5a858a0472071b32ee0b492668a6e5b6fa5b096611d941dc5274b0cdfc6e40427d658ffb308261640
SSDEEP
12288:IPE97KChNOnbTzquTt4qYzpN769N5tRTItWIy:IPEhKChNOnbTttoNUPoy
Checks for missing Authenticode signature.
resource |
---|
fb36202fc19dfd9950a2002d87016f23_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE