DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
Static task
static1
Behavioral task
behavioral1
Sample
ebe55149e983ec09f8d5189353d54233_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ebe55149e983ec09f8d5189353d54233_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebe55149e983ec09f8d5189353d54233_JaffaCakes118
Size
31KB
MD5
ebe55149e983ec09f8d5189353d54233
SHA1
67728441511a880a2eebbd9a1a723b897cc3e4ba
SHA256
2973c0ac39c74f86a257d908a7f462d697458884e7054e0ea95b342bd0bff443
SHA512
967f25f49e754d463c484ab4256be1425260655e4f6f25f33d23f5decae1073a012d9af91ec212cf594ebf2b9f7dfcbcb4b1e6c60ffe7b03e401bed356cb0839
SSDEEP
384:DNNe06t9hcyL6l3NDMaSZmwxtfxtA9JUEAfaVjOEW5+8lWH/L0lot+N:7eP9hMX0xtA9KoOl2QeS
Checks for missing Authenticode signature.
resource |
---|
ebe55149e983ec09f8d5189353d54233_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ