DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
Static task
static1
Behavioral task
behavioral1
Sample
876c3d3ede20813d235faf56f4de3bb2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
876c3d3ede20813d235faf56f4de3bb2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
876c3d3ede20813d235faf56f4de3bb2_JaffaCakes118
Size
217KB
MD5
876c3d3ede20813d235faf56f4de3bb2
SHA1
27c1d729ca117986a8e25215220568daffe06b16
SHA256
0ff9055278e76fd97afe846d3ef3fb1b26bd4e76428c31dff318b4d59a85437c
SHA512
55326e234c28863ddad76f5959da30c84b2ed0b3738205cae5ea9b094308747de18c2b036b8ac4fcf79d61651b293d63aa5e84eb47820dc7215dbadcb94f211c
SSDEEP
3072:iAGMFoAGMFoAGMFoAGMFoAGMFoAGMFoAGMF:iAG9AG9AG9AG9AG9AG9AG
Checks for missing Authenticode signature.
resource |
---|
876c3d3ede20813d235faf56f4de3bb2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ