DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
400bf2f304272b584c6d26ce5616cbf8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
400bf2f304272b584c6d26ce5616cbf8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
400bf2f304272b584c6d26ce5616cbf8_JaffaCakes118
Size
306KB
MD5
400bf2f304272b584c6d26ce5616cbf8
SHA1
5edb0b0fc96b6bdff84307eeabfc419be295ed3b
SHA256
7cae7f3880f7c02da2ceefd206256c2df263c17c6258eaaded3b25fe5c341c10
SHA512
bd949588dda01d89fcc7493b78a22b7e135bd016ba9ea28f636281f6c18b4a13bf3f07d375b533ec04f8f2c0214f6821bb94a813d16a9656f874cfa23638824f
SSDEEP
6144:KHl0WmQTy5/toHlEyOxbZdxMGZqKXeNZ35s3eoD8NsQQp:KOd/toOjxldxvZtiJs3RQNnQp
Checks for missing Authenticode signature.
resource |
---|
400bf2f304272b584c6d26ce5616cbf8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE