DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
Static task
static1
Behavioral task
behavioral1
Sample
370d8991d00b742aa7ab55108fd13ca6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
370d8991d00b742aa7ab55108fd13ca6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
370d8991d00b742aa7ab55108fd13ca6_JaffaCakes118
Size
234KB
MD5
370d8991d00b742aa7ab55108fd13ca6
SHA1
6f5f6f18a6c0096f95af9d2ff5084e0aaec18609
SHA256
c59e7f0425f3160307d3fc71315a78d7143e16c6e7b93cee1ccf91f00e16bb7b
SHA512
e2709d7c3112d8622a0324b36e8d47fb4c1001d19aeb925c8f6f2367006b17a55fc9d93fd1f7c4fc856e9c81aefcaadaf167bdc5659e221da0b1f79e1ef5c745
SSDEEP
6144:NWa74XgWa74XgWa74XgWa74XgWa74XgWa74XgWa74X:NWaEgWaEgWaEgWaEgWaEgWaEgWaE
Checks for missing Authenticode signature.
resource |
---|
370d8991d00b742aa7ab55108fd13ca6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ