DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
Static task
static1
Behavioral task
behavioral1
Sample
ffe7aba3f0721a24a950bad545a83a8e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffe7aba3f0721a24a950bad545a83a8e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ffe7aba3f0721a24a950bad545a83a8e_JaffaCakes118
Size
227KB
MD5
ffe7aba3f0721a24a950bad545a83a8e
SHA1
2dfb4a952c600b145cf69a3ea71b244419bfd806
SHA256
95b116a6acb2041ff6da7877456a52298b4e790ab16b45f596b810f0dc6aa4ca
SHA512
aeee232bfb99708567434b7b77ceaec39d3ca1bbc54737db72ea804e382c327e7b5886ac05b8fda31cdab69fc52f9212205ec112c31a0a5d9d2fa4b55c94e9fa
SSDEEP
3072:EMySN8AMySN8AMySN8AMySN8AMySN8AMySN8AMySN8:EMy6My6My6My6My6My6My
Checks for missing Authenticode signature.
resource |
---|
ffe7aba3f0721a24a950bad545a83a8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ