DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4d11868c5479b735bdf4912d26d7aa3e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d11868c5479b735bdf4912d26d7aa3e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d11868c5479b735bdf4912d26d7aa3e_JaffaCakes118
Size
156KB
MD5
4d11868c5479b735bdf4912d26d7aa3e
SHA1
e8ec3fa783c8183933c9343e6a74175e40e95556
SHA256
e65fabad88089ebc74c6860e6a91fc3f680fd406bc86b17d6be7b760486d658a
SHA512
cece9f7ec20eb8026490305006231bb269f7896c923e075c94078d8cb2f5a3cd59fe24e4acaa04e8ea7f1810a99eb446e392fd44f7c07c2cdfe3f3d9a4e88fb0
SSDEEP
3072:eIfi6M+xK/py1n/qPsGmTQzY441L+O/4MPR+fNy8grd0rS4D9ZyOtuV5fdfCEjGS:eN6M+xapy1n/qPsGmT0OL+bkR+Vy8grm
Checks for missing Authenticode signature.
resource |
---|
4d11868c5479b735bdf4912d26d7aa3e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ