DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
Static task
static1
Behavioral task
behavioral1
Sample
33361ae7f01f960e82c36f85143ed1be_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33361ae7f01f960e82c36f85143ed1be_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33361ae7f01f960e82c36f85143ed1be_JaffaCakes118
Size
32KB
MD5
33361ae7f01f960e82c36f85143ed1be
SHA1
2057caf831dc2bc402e08c9825a9e7e021324403
SHA256
30bbdbb9666c032ea3d2c60e4e9984dcc5cea0357eb0614cde0dfd9dde1cfa33
SHA512
57b3a838e44dfae1766db1862dcd552ac9c9260fcf74801c7e1337b8f1426f34fef3d0ed365aa8769ab67b6099d836b244f99dfd5d6a5f8b187f321dcd1c82ca
SSDEEP
384:WNNe06t9hclnM+xBwPDBefnK8NUQLSN/DFgdHF7xs4GWlBoKN8UWHfjHk:SeP9hITw7y1LSN/ZgdH/1FlBojU2fQ
Checks for missing Authenticode signature.
resource |
---|
33361ae7f01f960e82c36f85143ed1be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ