DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
bbe10d0304a3cb580f3793f65bf6dad6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbe10d0304a3cb580f3793f65bf6dad6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bbe10d0304a3cb580f3793f65bf6dad6_JaffaCakes118
Size
217KB
MD5
bbe10d0304a3cb580f3793f65bf6dad6
SHA1
cc95e4cfd6d4943d9f285791143e63d42d58b758
SHA256
e2940855d4e36034a8ff212b85509a22861b87934f8a3c4ce4cae5e3aba0719e
SHA512
aeea88ffe9ca1422e528e72c47293302970b45fc30c1801b314ef2cd30abbac7d5b6955cee7670624118c41d7e9fdd7f0a3d30e586a84652704c8501cd2c75d6
SSDEEP
3072:RQ17qgBW2Q17qgBW2Q17qgBW2Q17qgBW2Q17qgBW2Q17qgBW2Q17qgBW:CMgBkMgBkMgBkMgBkMgBkMgBkMgB
Checks for missing Authenticode signature.
resource |
---|
bbe10d0304a3cb580f3793f65bf6dad6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ