DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0dde750aed85fa3c022935a722a9affe_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dde750aed85fa3c022935a722a9affe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0dde750aed85fa3c022935a722a9affe_JaffaCakes118
Size
152KB
MD5
0dde750aed85fa3c022935a722a9affe
SHA1
6596c9ee6fcf046ffb22b92ceec807554fea9855
SHA256
de3afe3aff235222502708eb1f431574baadb2394cd3aadaaa52e9b04c11c207
SHA512
96498a6f21550286b3809f9ba89e56cdfe13e99eef3c7361a77592701ca6e7f9dc9fa2d31b8fae1a7a5090caf12a4f72b2c494a0f781b1feda5eef1b52370289
SSDEEP
3072:Y9EhO7kP/+6CZF4OYQkcu4DaWx35AyV9igu9Le:Q7a/+bkv4DaWx3CU9Sxe
Checks for missing Authenticode signature.
resource |
---|
0dde750aed85fa3c022935a722a9affe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ