DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
28b482f0b6eec68bf29abafb11c75b30_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28b482f0b6eec68bf29abafb11c75b30_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
28b482f0b6eec68bf29abafb11c75b30_JaffaCakes118
Size
19KB
MD5
28b482f0b6eec68bf29abafb11c75b30
SHA1
252163508972229f038dd494f394d3f84dc9a9d1
SHA256
e547a33d740bbdfee0d3ae659bef8c792640f9805c5716fb69ec2c40ec6eef9d
SHA512
8974ee5682a765646344ef90fb3e3544194bbf6a63472ecf110f1caf0fad9b1ac68cedad630653975e9056bd7d918001e2b568980c352e39a6cbc904ae7dde24
SSDEEP
384:cstYDJlH7vYAyvrPskVeHtTGOzhpFrPahkLnfoEHmCSVD+eZGCl:3tcnHIVejvChSwEHhoZB
Checks for missing Authenticode signature.
resource |
---|
28b482f0b6eec68bf29abafb11c75b30_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE