DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
e06c06d811d210d90d865e00a0370c2b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e06c06d811d210d90d865e00a0370c2b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e06c06d811d210d90d865e00a0370c2b_JaffaCakes118
Size
36KB
MD5
e06c06d811d210d90d865e00a0370c2b
SHA1
b212f1f2651e5c8bf6837e404c2d59091db7ffc7
SHA256
0ea50eba325f75ba5eaad94c37b812da98e09a47c7546a7315d109b4e6fa05e6
SHA512
5bd95e442ff9dba00f9350b01fa4cf5621479ac64fc7974cbeccd8773498a3060edfe193fcc785d240f438128819d001af10aee373beaffeea703e0c37ee6d7b
SSDEEP
384:Xd+k6d9hJydG5S2YVIARnTA+jPm6/ttXMIhMcS3o9HLFoVcfzySdTMP6pFvhhZNj:N+v9hE28JakzdIWJ3pjWwIDaJ
Checks for missing Authenticode signature.
resource |
---|
e06c06d811d210d90d865e00a0370c2b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ