DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
Static task
static1
Behavioral task
behavioral1
Sample
740302b75c1602326b36b571389e5016_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
740302b75c1602326b36b571389e5016_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
740302b75c1602326b36b571389e5016_JaffaCakes118
Size
150KB
MD5
740302b75c1602326b36b571389e5016
SHA1
fd843d00bc50c0fc0259f8646b254f792d7ec6d1
SHA256
632aa584719ca62cabdee7eeacbdad7c29124607f3d67c7539fcc1d213c9896d
SHA512
13158bce39699e3d52f6f2c81093967ad2601b6515f70819396512ce678eb7532984ca3be11ec912b89de614ee6bf41d31959bb4c4dcdcdcab0acc2b4596de52
SSDEEP
1536:kkf4f3PLMKwAkf4f3PLMKwAkf4f3PLMKwAkf4f3PLMKwAkf4f3PLMKw:If/LNwEf/LNwEf/LNwEf/LNwEf/LNw
Checks for missing Authenticode signature.
resource |
---|
740302b75c1602326b36b571389e5016_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ