DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
Static task
static1
Behavioral task
behavioral1
Sample
3359512c89be45f0a33c530618833fea_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3359512c89be45f0a33c530618833fea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3359512c89be45f0a33c530618833fea_JaffaCakes118
Size
213KB
MD5
3359512c89be45f0a33c530618833fea
SHA1
bcfacb5d211132c3225869570c4e93ea3888c3c5
SHA256
ed50fc813ef4d7f2a68d2648caabfd63875919fc040ef0f8096d9d456049a330
SHA512
4f7aebfd6bfb98a7adffb5f4cea13370565442074941cc44e336ed59aba1d9e6265f6e3b84fd4df2eccc81ca09ac9c1f19c8a1e9c6ade8f797db2c01654a4822
SSDEEP
3072:2GJpRcKGJpRcKGJpRcKGJpRcKGJpRcKGJpRcKGJpRc:24pRh4pRh4pRh4pRh4pRh4pRh4pR
Checks for missing Authenticode signature.
resource |
---|
3359512c89be45f0a33c530618833fea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ