DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
30fca090b3e777357aa611dec940a2ee_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30fca090b3e777357aa611dec940a2ee_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
30fca090b3e777357aa611dec940a2ee_JaffaCakes118
Size
451KB
MD5
30fca090b3e777357aa611dec940a2ee
SHA1
ceab8c71955428e8257ba9ec159a1c176ac8ba83
SHA256
927b1aa4bb6789797f104d11af21375a430f3c70f06115757d3827e7f964fde2
SHA512
2e3b31fcb549d34b82545e74851ae6cf3a26435bf07115cc92176b7984e80599f3d9e8ed67992c0b4a110cba8e1bcc02033da63ae7f5084f6507f09034badd34
SSDEEP
6144:k30To6P/ER5hB116eZ/VA9YvcYCCu9jWtJLDTDtZk8mgMCCP0McqICfMpnT+1zVP:A0To6nER5b6RCjtJvXEKqICEpnmVIz2
Checks for missing Authenticode signature.
resource |
---|
30fca090b3e777357aa611dec940a2ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE