DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
Static task
static1
Behavioral task
behavioral1
Sample
f43cb58379fe96524bc3d88c143c5b71_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f43cb58379fe96524bc3d88c143c5b71_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f43cb58379fe96524bc3d88c143c5b71_JaffaCakes118
Size
36KB
MD5
f43cb58379fe96524bc3d88c143c5b71
SHA1
5a70f52760968061ad48a340d0ed3e4f895abaec
SHA256
98a724958266bc89983db67aea19ede02d5686d39b83493a85b398ca35956313
SHA512
11a1ea592c1e67b59eb3234339317cac9cbc9d52e724d952f651d9fa04505a1787fe09a12ff02ce902244925818a068b782b691711a9ac988bb3d4a03ce9bde9
SSDEEP
384:U63e3/QH4tK4LsUlvmi3opjkSiVQzb6ouHl3rlVnrm2JRUAaIIHRO5WvNya:j3I/QHf9BU67zabWIwRO5WvNJ
Checks for missing Authenticode signature.
resource |
---|
f43cb58379fe96524bc3d88c143c5b71_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ