DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
Static task
static1
Behavioral task
behavioral1
Sample
378d36b96e4227d2b95615b3c0ddef82_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
378d36b96e4227d2b95615b3c0ddef82_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
378d36b96e4227d2b95615b3c0ddef82_JaffaCakes118
Size
167KB
MD5
378d36b96e4227d2b95615b3c0ddef82
SHA1
b8f8a8b6600649124edd1d791185fd3f9d971ad3
SHA256
1ab6a4fde3aa799f8c70aebdb37e232e490193585a88c72011bd5929c8d91910
SHA512
26ac44351531f9e9a92f7f6c8b9a96472a95caac193d654657be135a87a089a2813cfdee1f892ddad0a0b497433e936e8020dc9948906a34934bf14230ccd620
SSDEEP
3072:NWa74XFCWa74XFCWa74XFCWa74XFCWa74XF:NWa74XgWa74XgWa74XgWa74XgWa74X
Checks for missing Authenticode signature.
resource |
---|
378d36b96e4227d2b95615b3c0ddef82_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ