DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
36879d88651e1d68daed79237893166d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36879d88651e1d68daed79237893166d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
36879d88651e1d68daed79237893166d_JaffaCakes118
Size
87KB
MD5
36879d88651e1d68daed79237893166d
SHA1
937b9e418b3df275aad0b3e53df680e0b3a73667
SHA256
bd5d86ad7ee7631aea532433ccc47b132255a5283ebc91e81ceccddf2243b977
SHA512
40983e8c6106c4541a2bcfdc146a74f264e4edfa9e3f7cb94704619aa15cd5c6a10d1c67eaa836415363f96f6fc770ed7e83a41ba8e357c6fee2089962884a62
SSDEEP
1536:cVT9sysnpMsa2CpvErMA5VsUO5+rZbSkCXw9+HH5mmjQ01SiRoEW6qztygqqRW:krsnpMF9AMCVnO5+Ntn9+Q0FqEBqBnqt
Checks for missing Authenticode signature.
resource |
---|
36879d88651e1d68daed79237893166d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE