DllCanUnloadNow
DllGetClassObject
Pknbgdd
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4bb26c8284b761d94a0a3936327b60ca_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bb26c8284b761d94a0a3936327b60ca_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4bb26c8284b761d94a0a3936327b60ca_JaffaCakes118
Size
111KB
MD5
4bb26c8284b761d94a0a3936327b60ca
SHA1
f4df3b6727c19fce401f78d03b4b50bad0de48ae
SHA256
8dd0084c0a5d1f6dbccaf08c4aebf36cab6a45e1710ab8f1d76fd0ddcc46b075
SHA512
31ad8bb3a72f32858df5c36e9dbaf68729e660c95fa80b9308225af2081f1420bfd46847673301cbb11762c85a7066218acc82500e50c00450dc82e4506a1194
SSDEEP
3072:sLEfy7U0Gjx+z0cZeJc4U2mehwDl56bjY/:sLEfv0Gt+kSc7hw556bs
Checks for missing Authenticode signature.
resource |
---|
4bb26c8284b761d94a0a3936327b60ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Pknbgdd
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ