DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4927a40dc94f68848e3df37528a451ff_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4927a40dc94f68848e3df37528a451ff_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4927a40dc94f68848e3df37528a451ff_JaffaCakes118
Size
768KB
MD5
4927a40dc94f68848e3df37528a451ff
SHA1
58e446e7617f8b39bf3e4bcdf7678146312e7542
SHA256
4d86c8dfc805353533de769480abf057263a28833533067b2d0240d77e216b72
SHA512
f07328605d1e2f3ca1face1b35302fd2a063b037529b2227ac77b2d370153216b466f4d001d5bc6c62568a47f49d7ff0b0604547ef09b3b568e55628ec399bd0
SSDEEP
12288:gPN9Dwt6oCegO0eMSeII+yQoKVOluBA+GihJDLiQ5WjIn+YxRVz/Aso6wQtxsKjT:yXDwt6oCegXzQ/OluBA+NJDz+Y3VzYBc
Checks for missing Authenticode signature.
resource |
---|
4927a40dc94f68848e3df37528a451ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE