DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
463fef63e59acba0a404ded5edc7aed1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
463fef63e59acba0a404ded5edc7aed1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
463fef63e59acba0a404ded5edc7aed1_JaffaCakes118
Size
613KB
MD5
463fef63e59acba0a404ded5edc7aed1
SHA1
479975c3038ef6ae8d83a36b1cffa2bfb02c51bb
SHA256
4075537732720cf804938c050ee38f22da47eb8558788d3ae817ea3995fbe368
SHA512
a31714179ed64b495a107f4d32b71d31ef98ff39b2e94113f58bf425752bf82091e9616e76e301080c8cb08d474f53c6425cba9b5c1b11a716c2f6a553613b1f
SSDEEP
12288:whE5OGvB5ZgMI09p34vqT4bZoXEDfXKtoMwy7BbW9:yGvB5ZgNv1eXEDaSMDW9
Checks for missing Authenticode signature.
resource |
---|
463fef63e59acba0a404ded5edc7aed1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ