DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Igdokkg
Static task
static1
Behavioral task
behavioral1
Sample
0881d29c9d6715b21699cb530e64de66_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0881d29c9d6715b21699cb530e64de66_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0881d29c9d6715b21699cb530e64de66_JaffaCakes118
Size
785KB
MD5
0881d29c9d6715b21699cb530e64de66
SHA1
9e82f1490e9667ce8b85e0d85d3bae4b45985efc
SHA256
31d98ddf543783b9a789d204931d4c7fa516779cff6e7429a9ede27f198ae139
SHA512
27d76a1babf909e0b35b36e2134c933b85bcf314bd174a4412c00d126e04d85af292d7801fd3f5346305c6d555d1adb1bb7cd97d162e75417b530828fdb9746a
SSDEEP
12288:WdGXmL8wb+vQzKklj0WmOmRDHg0mG/vxHvnZtGNNvpaBnREAvAQqbV9N6ydT:WdG2L8zuKYZmjd3PHyNvnQO
Checks for missing Authenticode signature.
resource |
---|
0881d29c9d6715b21699cb530e64de66_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Igdokkg
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE