DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
Static task
static1
Behavioral task
behavioral1
Sample
e0b66cc53cd184391cc4e82516ab4844_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0b66cc53cd184391cc4e82516ab4844_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e0b66cc53cd184391cc4e82516ab4844_JaffaCakes118
Size
231KB
MD5
e0b66cc53cd184391cc4e82516ab4844
SHA1
b81c70bc7503be0b30054cb4be579dfe877fb1db
SHA256
e18c3476f20f31e47140231718b2885b3386dbc7852686a2e43c305fc696eeda
SHA512
2c8032c4ce6321f1f73f8ecb0217ef25da7bca5f55eb3cf8361a1b4b86ad7d0577f51239b6dd1859631fab5aad601f5c3d2358b273c1b8f07cc6448c3f23d045
SSDEEP
6144:/1XQSi6n1XQSi6n1XQSi6n1XQSi6n1XQSi6n1XQSi6n1XQSi6:2SiRSiRSiRSiRSiRSiRSi
Checks for missing Authenticode signature.
resource |
---|
e0b66cc53cd184391cc4e82516ab4844_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ