DllCanUnloadNow
DllGetClassObject
Kmknclm
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
7358c6bf2e666e10ad4cf876a4b9fd8a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7358c6bf2e666e10ad4cf876a4b9fd8a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7358c6bf2e666e10ad4cf876a4b9fd8a_JaffaCakes118
Size
111KB
MD5
7358c6bf2e666e10ad4cf876a4b9fd8a
SHA1
1911c9f0dc034321471d0fc90cb4c8f6503d5cdf
SHA256
042481219ffe12c18cbb121ded7ae7bc1270d03deb564977ace2c0fc42fb9f3b
SHA512
0c3c5fba369789dde5bc572d3b642c470f8eabeb37711cab577fd8e4f9108ffb7bf5be4c3eb352c843cb2df4749b6758ca42e76be876ba53d3b087a80c4be6d3
SSDEEP
3072:ZLEfy7U0GjxTZoosU1hsZlTYgE4AYB0DvWjuY/:ZLEfv0GtVF1hsX9EnY1
Checks for missing Authenticode signature.
resource |
---|
7358c6bf2e666e10ad4cf876a4b9fd8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Kmknclm
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ