DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d2076dd0e8d75df9ddfdfebe428373f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d2076dd0e8d75df9ddfdfebe428373f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d2076dd0e8d75df9ddfdfebe428373f_JaffaCakes118
Size
120KB
MD5
4d2076dd0e8d75df9ddfdfebe428373f
SHA1
0272f140ad16e372a717a53fdd6466c4a8a5fde1
SHA256
5c85b67f4e32e89e363294553ff852453301692a058a914f325efc3018f94f35
SHA512
5054aacd25084e681f19f48c9714032d82e22fcab5263caaa2a016f763ad78ae5fffb82def45a94626b0fca2ef1104ae86115143e32538dbf386efd1091c83c5
SSDEEP
1536:uo/O4kc2BGRcKRl6krYrIbafIlR/5abAZGbIO1Mzu66CZvE71ghJtcgT:uomIaqccD+bAZGbIO1Mza2kgT
Checks for missing Authenticode signature.
resource |
---|
4d2076dd0e8d75df9ddfdfebe428373f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ