DllCanUnloadNow
DllGetClassObject
Lganoho
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
dfb35a1d2c03f3fb5e39fe7e7588751a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfb35a1d2c03f3fb5e39fe7e7588751a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dfb35a1d2c03f3fb5e39fe7e7588751a_JaffaCakes118
Size
111KB
MD5
dfb35a1d2c03f3fb5e39fe7e7588751a
SHA1
91c3c889a62403f59f612bcddcc609e50404385b
SHA256
6fbf634a9eec26f54b1bea7a64e24584b9608a3f4f7614a7d33d99591be6b194
SHA512
3df4c13674ec152a385dc69d672a25e44966271e82d739f33c0ad55a879d6fe92fa3b117e367e96a08d0ec43c59fc2afa2293776728d2bc801d8300fb3d0208e
SSDEEP
3072:/LEfy7U0GjxlqqmVkVdub8/hazriA3Y7TTY/:/LEfv0GtxIWha6AI7Tc
Checks for missing Authenticode signature.
resource |
---|
dfb35a1d2c03f3fb5e39fe7e7588751a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Lganoho
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ