DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dde4d637e7e71b0214243b3002d37261_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dde4d637e7e71b0214243b3002d37261_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dde4d637e7e71b0214243b3002d37261_JaffaCakes118
Size
451KB
MD5
dde4d637e7e71b0214243b3002d37261
SHA1
a7fdb4501466adb2648ea3aca4a5ac9d68a686cc
SHA256
6ced7542e2c65b0e168d787266f5e3b0869cf940bff8ab03d068b30743c9193e
SHA512
70b1842f53a92e064a8b5e94f0f727423d8f916fda5dc1e38cec2bbf57ed4fcb5a5b826ee93e179882c2c6e8627b895b8c9c85b290b26827bdb5fa3a751820d4
SSDEEP
12288:GNOTOhyGDZMVwVqTqYwu7iiFQZZsHTcLh:S2aDZM/2YH7XWsHg1
Checks for missing Authenticode signature.
resource |
---|
dde4d637e7e71b0214243b3002d37261_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE