DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
bb5e04219f70cba2e2ce62c1ef3429ba_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb5e04219f70cba2e2ce62c1ef3429ba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb5e04219f70cba2e2ce62c1ef3429ba_JaffaCakes118
Size
213KB
MD5
bb5e04219f70cba2e2ce62c1ef3429ba
SHA1
8cc3f102556b3506a3c3e71f98548198fc82889e
SHA256
a00189a189ca1e24cbb26b8502136f7c60d0e8737307d56e0b4926e4f788806b
SHA512
1f2095d459dcf8df889764d8fe3936df62dc55efa0209452a8436fe4c1a422d2041e3ada2e92d823875e6ea66864ddf48d69f8be58b846fb9e670331c9f79827
SSDEEP
6144:eg49dSH2g49dSH2g49dSH2g49dSH2g49dSH2g49dSH2g49dSH:e7171717171717
Checks for missing Authenticode signature.
resource |
---|
bb5e04219f70cba2e2ce62c1ef3429ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ