DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
Static task
static1
Behavioral task
behavioral1
Sample
8c20c0b4d736cf204b0ac14d03501626_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c20c0b4d736cf204b0ac14d03501626_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8c20c0b4d736cf204b0ac14d03501626_JaffaCakes118
Size
227KB
MD5
8c20c0b4d736cf204b0ac14d03501626
SHA1
52838a9fda1d3f046b9f10a0aed27ebd25f77cad
SHA256
8118a93b424c566cf22db3189cb1c8511f30f1aa99dd20aafa3ebd2a731da0f0
SHA512
face3dabf07adde4f83a933f75848a373621f1897608e06d3bb7f151d91728d63344694c656fb8f972d4c26b2e6298a106765c485db29dd3b2f64760be8d4660
SSDEEP
3072:k+rGQbJEXr+rGQbJEXr+rGQbJEXr+rGQbJEXr+rGQbJEXr+rGQbJEXr+rGQbJEX:uQdEPQdEPQdEPQdEPQdEPQdEPQdE
Checks for missing Authenticode signature.
resource |
---|
8c20c0b4d736cf204b0ac14d03501626_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ