DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
83a186030843a54b33b01bf3c8261b3f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83a186030843a54b33b01bf3c8261b3f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
83a186030843a54b33b01bf3c8261b3f_JaffaCakes118
Size
234KB
MD5
83a186030843a54b33b01bf3c8261b3f
SHA1
f9b9fff5a8fb09d74c1c52029d9c8008356238de
SHA256
e35a183d5a2f856c70dfaf937f8f919f2924e681e0bc67961b2b7ac363474947
SHA512
db9fb47cfbfa76ac5df30e4c6b0aa782f6a11edb5fac3de2f6fdd1927d766611c6bce80bfa2109eea6c304930fc291049185421ffde45cb0e87fac0cb0759c16
SSDEEP
3072:XKoOMJWlsjKoOMJWlsjKoOMJWlsjKoOMJWlsjKoOMJWlsjKoOMJWlsjKoOMJWls:XXJW2XJW2XJW2XJW2XJW2XJW2XJW
Checks for missing Authenticode signature.
resource |
---|
83a186030843a54b33b01bf3c8261b3f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ