DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
e76899894e4c1dd358d56d324b9bcf70_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e76899894e4c1dd358d56d324b9bcf70_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e76899894e4c1dd358d56d324b9bcf70_JaffaCakes118
Size
231KB
MD5
e76899894e4c1dd358d56d324b9bcf70
SHA1
ded36bc0d80a3d683416b779aa05a098b7a068b1
SHA256
7e3d5688b3d9f7ec94e973a432e80cb95d47a744e8ef812c268e95279e642676
SHA512
634e3d16600648e4035beffff8ac4b99e06529852af11654ffd5af9f0d1c98fba6db6daef925638e85a5f9a93c8b3bba849135b0dd501e9c2858765feca0d8fe
SSDEEP
6144:KdU3thUFdU3thUFdU3thUFdU3thUFdU3thUFdU3thUFdU3thU:n9797979797979
Checks for missing Authenticode signature.
resource |
---|
e76899894e4c1dd358d56d324b9bcf70_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ