DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
GetProtectedKeys
SetSecondStorage
_NotifyShutdown@4
_NotifyStartup@4
autorun
startup
Static task
static1
Behavioral task
behavioral1
Sample
cea4fc6658aa71a5af8f83aacf5357b3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cea4fc6658aa71a5af8f83aacf5357b3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cea4fc6658aa71a5af8f83aacf5357b3_JaffaCakes118
Size
347KB
MD5
cea4fc6658aa71a5af8f83aacf5357b3
SHA1
91c52ae333def568ee81030df0871967fb482c2a
SHA256
5897f624a2b74812f59113f11e99f7227beb330e527eb5df4d76bd2b0cea237b
SHA512
4cd9ca10450e91111cd528c672c660f4f1046b006640ff7dd6d2724b7f40e35cef21d5c93d1c0e40ed5c8f58a5c46524c95c174d3814cf3e5f5e01584085bccb
SSDEEP
6144:A43xZ5cjRBsoU188lavcFbgKZVhoO8bbMBWxVf:AWZK1k8Bva73hohbbMMxVf
Checks for missing Authenticode signature.
resource |
---|
cea4fc6658aa71a5af8f83aacf5357b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
GetProtectedKeys
SetSecondStorage
_NotifyShutdown@4
_NotifyStartup@4
autorun
startup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE