DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllInstall
Behavioral task
behavioral1
Sample
JaffaCakes118_47b00646d7155263da9683a540541c1e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_47b00646d7155263da9683a540541c1e.dll
Resource
win10v2004-20241007-en
Target
JaffaCakes118_47b00646d7155263da9683a540541c1e
Size
160KB
MD5
47b00646d7155263da9683a540541c1e
SHA1
b0f53c3b9cb940d51f944ab9662544de2880c503
SHA256
3bf753cae348a486868b7329eabceb3aaccee76a42c748c4b15747cdc12d4d7d
SHA512
ff3c58f00e504f35abb3a369e0bf2e68038fcdbc319ab0d89b6aaabeaea20874111a466d82e7821c3bfd72b7cd5bfaf53a32d60b86be91de7d9c684766cfab71
SSDEEP
3072:bbeZc+D8yFW6tzd5hdQzEfXv1bT1TBfth+npJa3r:vdyF1tzQwvlZTBlwnpJe
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_47b00646d7155263da9683a540541c1e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ