DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
Static task
static1
Behavioral task
behavioral1
Sample
4ce0ab37a761d3d75c9bcfbe0e893d3f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ce0ab37a761d3d75c9bcfbe0e893d3f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4ce0ab37a761d3d75c9bcfbe0e893d3f_JaffaCakes118
Size
238KB
MD5
4ce0ab37a761d3d75c9bcfbe0e893d3f
SHA1
b463e11d5eebdcca3e377ed7c7cdf08da3787b17
SHA256
7f045881089a07f5d3dcf0c895990c3299d04f3f1ed4c9ce731cb04fb973bc8e
SHA512
edd21716b72e15a66db58f850ffc85daa4582006c86881b2b4dc1f26c96547d0555112a2dbd58e3daae0191ba4520f4b089c8c9214d7f28777d2f3255a92a1fc
SSDEEP
6144:x+CUG1+CUG1+CUG1+CUG1+CUG1+CUG1+CUG:x+e+e+e+e+e+e+
Checks for missing Authenticode signature.
resource |
---|
4ce0ab37a761d3d75c9bcfbe0e893d3f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ