DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
Static task
static1
Behavioral task
behavioral1
Sample
a516e5ed30ecbaa1b43cae2d48f97a57_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a516e5ed30ecbaa1b43cae2d48f97a57_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a516e5ed30ecbaa1b43cae2d48f97a57_JaffaCakes118
Size
213KB
MD5
a516e5ed30ecbaa1b43cae2d48f97a57
SHA1
69a54cb1245611b9cdc943c433dab00d4f3bb2b1
SHA256
a0eadd7e88ebd37abcdd3dfd806f63a8c8b75782f7948cb8031a5297a0526899
SHA512
f8bc91e2a5d55adb00a0b61f9e721a7f9820ec0b68ffb47cb42e22a8c3a5b8eb4ffcd6af6603a1f9fdef5f811c68df82126f4f8fc52ee2be4dd602367a8adf7e
SSDEEP
3072:2l8MZa6l8MZa6l8MZa6l8MZa6l8MZa6l8MZa6l8MZa:0VZHVZHVZHVZHVZHVZHVZ
Checks for missing Authenticode signature.
resource |
---|
a516e5ed30ecbaa1b43cae2d48f97a57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ