DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
Static task
static1
Behavioral task
behavioral1
Sample
0489ffb33395fc5e97e1eb099e12fadb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0489ffb33395fc5e97e1eb099e12fadb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0489ffb33395fc5e97e1eb099e12fadb_JaffaCakes118
Size
195KB
MD5
0489ffb33395fc5e97e1eb099e12fadb
SHA1
a3c7781c90845447cc9c19ecb7c32a3d84c19fdb
SHA256
ce7d705399899b8de23a8cba1a3e87001f70c45f1d6c127c7cb3dd25ef6c4905
SHA512
73cc9dbfdded1b08d97430e82d4e7af9932ae5f2b09f01a501a36710ef8d99fe6e43cddb1b1f105e94f99223a840e80b5b064c9a953b44ed4e20a1b1135cd613
SSDEEP
768:9ehypb42gT9NwugS211SKXm9ptGdSWwH71Ly:9/B4xTfwug0K29md471Ly
Checks for missing Authenticode signature.
resource |
---|
0489ffb33395fc5e97e1eb099e12fadb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ