DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3493ce551953669c7fe0ba6399f49914_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3493ce551953669c7fe0ba6399f49914_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3493ce551953669c7fe0ba6399f49914_JaffaCakes118
Size
203KB
MD5
3493ce551953669c7fe0ba6399f49914
SHA1
28e79229c529fae03dcc3b27ff8b8d4cc7b073b7
SHA256
985342b36515e86a75d71316be94e0137e878446dfdb6d103efcf919aab6f802
SHA512
fe1df219f7f0274397bd0f2f44a2f1aeb8eeb4568299fa8e830de7942efc4719d7718869ef60944b4be4c248516a76ea9251c1712f77e02dba13482bb513ffc0
SSDEEP
3072:ZnQecXC4SWyuxqTckdfABhKFewXWjP+33UIulckC7HDhv/Px/OHzp8oL2z8jFMH3:ZQeLHqadfbAwmy3UIEcp3Px/Azp8oLFI
Checks for missing Authenticode signature.
resource |
---|
3493ce551953669c7fe0ba6399f49914_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE