DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
11e6864947357aabb738d34e04497970_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11e6864947357aabb738d34e04497970_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
11e6864947357aabb738d34e04497970_JaffaCakes118
Size
736KB
MD5
11e6864947357aabb738d34e04497970
SHA1
6c67e266dcfb2c57bc228908f5f0cfff603bd0ac
SHA256
b90d8392721f03af4d07029bfd1138ffa96f6e72789886d725dba144da74bb5a
SHA512
f9b12b59931be7ea1db3b70e755727040a62ee115d9a8672ede767bf5d2f4695f43eaf40db7817e4782deaeb839429b1666aed8aba6c5f9573566fb50daf93b0
SSDEEP
6144:qGEbylWbMbJv/+XAZYBGlZ68dlBar5xMVXoSxy0f0uOtXqZvNzMwLwULt0WkxcqE:qG+UWbMFnVdlCW9xKUM5cqEvXT5Bp
Checks for missing Authenticode signature.
resource |
---|
11e6864947357aabb738d34e04497970_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ