DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
Static task
static1
Behavioral task
behavioral1
Sample
004c6c26cb616587edc25ab615491b10_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
004c6c26cb616587edc25ab615491b10_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
004c6c26cb616587edc25ab615491b10_JaffaCakes118
Size
32KB
MD5
004c6c26cb616587edc25ab615491b10
SHA1
cbdce6f8fc9de04ce97a378feeabb08f978723aa
SHA256
e28104281a4184a546c45eab65ddded8c7332e1b5d7f080b8b7a14c097545f34
SHA512
000e6beb4e12f25f0bc0558ac2649374f1d1b5b4d07ce87276e07c8c9fb3733b483bce61e47642e123cf71771a6d9e0d12ae4b129121605aaf4b18e697fcac20
SSDEEP
384:8NNe06t9hcln4YtpNI3THpkYYXXguK6dh5G9BD1d8UWHvmROl3:seP9hBOnhYYnVSjWU2v
Checks for missing Authenticode signature.
resource |
---|
004c6c26cb616587edc25ab615491b10_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ