DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
Static task
static1
Behavioral task
behavioral1
Sample
3e24745078f0f8ccf02e72f7991886cb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e24745078f0f8ccf02e72f7991886cb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e24745078f0f8ccf02e72f7991886cb_JaffaCakes118
Size
224KB
MD5
3e24745078f0f8ccf02e72f7991886cb
SHA1
ffa99712e304704ca35edbb6a75a4dba94e12077
SHA256
765f8c9c97ed0c7b779c7f3acd4bb086fd5faab6ce44ee7053f61a16406514f5
SHA512
7da75b54f767785b7c902c00b0f2ee4a12ce89398f2f1847dfd80b93f0115d5dbf46502905a78aa685f38cab96a89903d25bd723cb11264b96850be467f7cce9
SSDEEP
3072:rq+YKSZqEKaq+YKSZqEKaq+YKSZqEKaq+YKSZqEKaq+YKSZqEKaq+YKSZqEKaq+f:r8KSJ8KSJ8KSJ8KSJ8KSJ8KSJ8KS
Checks for missing Authenticode signature.
resource |
---|
3e24745078f0f8ccf02e72f7991886cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ