DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
Static task
static1
Behavioral task
behavioral1
Sample
ce833e825406e549a31cc69b005e5c31_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce833e825406e549a31cc69b005e5c31_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ce833e825406e549a31cc69b005e5c31_JaffaCakes118
Size
217KB
MD5
ce833e825406e549a31cc69b005e5c31
SHA1
f3d3a8f550afd7b010a762c1508a938c1d5363af
SHA256
e58ce9fca3acfc1c29e4de774349b2d1f642a6ee38c39ca8a561956ae042f131
SHA512
e1c548e4d1a02fc5104e1dc4157f51b9dbeaa3ce79d7c735bc97e74e7c1e1842dcad0a31f70ea863c4cca623c2ff449d7ca27e4518be34285a758e204baacd4d
SSDEEP
1536:TkfrWQShxUfUkfrWQShxUfUkfrWQShxUfUkfrWQShxUfUkfrWQShxUfUkfrWQShi:SGxi9Gxi9Gxi9Gxi9Gxi9Gxi9Gxi
Checks for missing Authenticode signature.
resource |
---|
ce833e825406e549a31cc69b005e5c31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ