DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ff659bcbd700b8dafc03eded43b0ccfe_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff659bcbd700b8dafc03eded43b0ccfe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ff659bcbd700b8dafc03eded43b0ccfe_JaffaCakes118
Size
76KB
MD5
ff659bcbd700b8dafc03eded43b0ccfe
SHA1
3a9c730f89c9ec709e9328b4e59117b367a96a1f
SHA256
cce7767822968a7a4c929c9b270af25807e6e4c687470b535f14e27e004602ec
SHA512
7dddda64e01492a971d13d9b3ed05882f0a430b7b77429e14f5aace8caf3037a3d479ab9b9619e39b0785006c1349b4f5264cbbb5b0e1d6232df2696d1e3da2b
SSDEEP
1536:+MBeH3MyeI3wwsTQoZCVOKmOIgEZm/gV:+MBABw9UVOAFgV
Checks for missing Authenticode signature.
resource |
---|
ff659bcbd700b8dafc03eded43b0ccfe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE