DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3198089b93c634368431a988107ca1ce_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3198089b93c634368431a988107ca1ce_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3198089b93c634368431a988107ca1ce_JaffaCakes118
Size
772KB
MD5
3198089b93c634368431a988107ca1ce
SHA1
3870ae87ae779e2d37d0d7ea153e8bcd97b31ede
SHA256
b5f92a6ac162ad1329c7651f56e924c95252f286564f7d9b0262ef3a24dba8b0
SHA512
df53e318a99e21f207d8d67a64323c9936c4102f1e22057a38327ef44fd5850893d7808e743e718bea6ebd94562637b57cdb889764282ab833728cf8bf9b5dac
SSDEEP
24576:ph0QA+jIKeCtIWjLZ31TGOlsq4tSS1K4M1y:pOjejtVZvlsxtbK4M
Checks for missing Authenticode signature.
resource |
---|
3198089b93c634368431a988107ca1ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE