DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hgfrd
Static task
static1
Behavioral task
behavioral1
Sample
2cc8ca27f7002cbc6dd5d8413276ac58_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cc8ca27f7002cbc6dd5d8413276ac58_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2cc8ca27f7002cbc6dd5d8413276ac58_JaffaCakes118
Size
32KB
MD5
2cc8ca27f7002cbc6dd5d8413276ac58
SHA1
4d25ba04274721510b460062adf4380d33bde848
SHA256
f4e52adf544c22978ebf6d16afd6dd353fd443583f0e86c7b725027181b100d7
SHA512
00d4dc47fd944a3b5d899e611630e8d584f718e384d0eb54ff7a50a7995672a6a25334d8ecfea026e70abda0a2f682306eeafc0d5295ce08be0ed7005e45d195
SSDEEP
768:H+ThI7GT21r3uSF7K3DZk90VdxKswLgxX4:H2hL21VF7KxVdI
Checks for missing Authenticode signature.
resource |
---|
2cc8ca27f7002cbc6dd5d8413276ac58_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hgfrd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ