DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4979e6f1c70a253362cd7806ae2b7dd6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4979e6f1c70a253362cd7806ae2b7dd6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4979e6f1c70a253362cd7806ae2b7dd6_JaffaCakes118
Size
176KB
MD5
4979e6f1c70a253362cd7806ae2b7dd6
SHA1
e06d2578cabeb96b043238e7affa8f2bc1e6cef7
SHA256
eba0afae8be6ebfe14dc34bc61016ec0becfb379fc7400f5cc417db994710b85
SHA512
0908c5af0ed90fa5927d29e98b4f0043bc450e01e7b9402b90fa8afb8bc3ea129b605764b69f3122814207d6c680bee74c70e378806bc45d7ecc40d8abc5e857
SSDEEP
3072:YIHOytNvmyeT+dWIm/Fod54nrkpNly876CsK5BlaR:Y4OyPg2d54oNly87VsO
Checks for missing Authenticode signature.
resource |
---|
4979e6f1c70a253362cd7806ae2b7dd6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE