DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4cda955853cb37d1c66453213a75cbb5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cda955853cb37d1c66453213a75cbb5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4cda955853cb37d1c66453213a75cbb5_JaffaCakes118
Size
732KB
MD5
4cda955853cb37d1c66453213a75cbb5
SHA1
98c21a5cd40eab3212e8a8aec3db3a0570e70333
SHA256
57d3124beed7003a50e6192ab0b459d4996ba84b6e85659443bce8b5c5528431
SHA512
c7af04ac1f5ad881e620b1068cd070d5189919fa1be27fdf841f0785cfe7aa2808f054fab8749fc532d0be868e944d2ea9f2c43f55cdbb3cce132160698df9bd
SSDEEP
6144:P+lUz1rsGT2re+nGUE53VBcrUTAhpdnuhboB90EDfXFwto0LlRYdwEIRzVnb:P+6WQ+nJE5F+Y+pQZoIEDfXKto0ZRV
Checks for missing Authenticode signature.
resource |
---|
4cda955853cb37d1c66453213a75cbb5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ