DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hgfrd
Static task
static1
Behavioral task
behavioral1
Sample
8216d1d1496baca69b6ca9b09e391a6b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8216d1d1496baca69b6ca9b09e391a6b_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
8216d1d1496baca69b6ca9b09e391a6b_JaffaCakes118
Size
224KB
MD5
8216d1d1496baca69b6ca9b09e391a6b
SHA1
2ee3c7fe87a3edf07aed12a83f8875541a3871e7
SHA256
e177bf0bc354a0c08cae36f24140de2e97a3ae918177e6ef80d4a06655f15634
SHA512
9e08f25300b2d311729b870623e3965c8e3ad1bb2b48a12035b7e404663e4fdd33026b5bc7f16dac4b4e4eb90151f101f4be66dfeef9f4fe66c1d7a6755c1d19
SSDEEP
3072:i4F99t4F99t4F99t4F99t4F99t4F99t4F99:TOOOOOO
Checks for missing Authenticode signature.
resource |
---|
8216d1d1496baca69b6ca9b09e391a6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hgfrd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ