DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
Static task
static1
Behavioral task
behavioral1
Sample
bd04ba5ff1415fd0bf9f309b2a605f6e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd04ba5ff1415fd0bf9f309b2a605f6e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bd04ba5ff1415fd0bf9f309b2a605f6e_JaffaCakes118
Size
224KB
MD5
bd04ba5ff1415fd0bf9f309b2a605f6e
SHA1
fa1697ac41873f78f1a8c281177e48b1be3707ad
SHA256
9ad1e13b70d385be8c16cdf20d02a3c3c1be1e13f07a8941b4e9152c823b4d65
SHA512
ec4df627a0dffd894e190ff57ed86d2f94fa0d94033016b6265eacffc88241fe953e33fe14c212bbe5f483af5e09bbc855b599b6a97f7c5fc21c4a4c5c91eb72
SSDEEP
3072:tIQIgToIQIgToIQIgToIQIgToIQIgToIQIgToIQIgT:tIQI7IQI7IQI7IQI7IQI7IQI7IQI
Checks for missing Authenticode signature.
resource |
---|
bd04ba5ff1415fd0bf9f309b2a605f6e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ