DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3fc4d0703247af269b3391a765b0524b_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3fc4d0703247af269b3391a765b0524b_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3fc4d0703247af269b3391a765b0524b_JaffaCakes118
Size
417KB
MD5
3fc4d0703247af269b3391a765b0524b
SHA1
ffda9ee060b67f1a4994a6894d29a241e17d5bd6
SHA256
ce0d487b489cfbd4359d29cc7a57e86f5b7dfc27a4e746f7ad6c2a1ebf174dd1
SHA512
309d765eb567b82f5fc20846a2118a62cdc0eb85cf9630c64502dfacf44f6fd0412c5bfcae6bb07611da095b671ae203e5260d965177395616935a56c046ea97
SSDEEP
6144:trj6TqAyhvoZpsRmCvUBeSIae1S6Zg5fNmytgRVcEx8eW2N/qrQhRpwbT:tyGLvonsRnvRSe1SsmVmQgRv3f5XwbT
Checks for missing Authenticode signature.
resource |
---|
3fc4d0703247af269b3391a765b0524b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE