DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
ea5d4185b79bf0447e9a4352b567fd8d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea5d4185b79bf0447e9a4352b567fd8d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ea5d4185b79bf0447e9a4352b567fd8d_JaffaCakes118
Size
227KB
MD5
ea5d4185b79bf0447e9a4352b567fd8d
SHA1
69a6528b260f541a6a93fb00dbc2bc002bc17b76
SHA256
f1a1ab6bda077df5cb4a1e25460a9ba08df8b73819a12f5d62ab654acd9d3785
SHA512
af8172f25e3b167269c88de546e4f9766e95df804dfeb46702709074181681809bc556cedd2d51e2f24cb0c005ae8345bccadb72de43e0a5b6db3ba0df0c9cab
SSDEEP
6144:Hc0RedEc0RedEc0RedEc0RedEc0RedEc0RedEc0Red:Hcscscscscscsc
Checks for missing Authenticode signature.
resource |
---|
ea5d4185b79bf0447e9a4352b567fd8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ