DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
Static task
static1
Behavioral task
behavioral1
Sample
ef805ce85dd3cb241044e48d1d54e764_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef805ce85dd3cb241044e48d1d54e764_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef805ce85dd3cb241044e48d1d54e764_JaffaCakes118
Size
220KB
MD5
ef805ce85dd3cb241044e48d1d54e764
SHA1
f51ef704bc15284a274173e4a9e98273ff40230f
SHA256
b0d13214ab31d07486673364722c67044524591e2c6e73a5dd2f960dd315c2bb
SHA512
d642001412d5d77c83bec67d051b9c405502dd15cdea2d874c61332afbfb16d0b79fd544ea0c33b9248dcc7c1a720b3e8433a95052be7c420aff20da6605ece1
SSDEEP
6144:p2ozd54J2ozd54J2ozd54J2ozd54J2ozd54J2ozd54J2ozd54:pTzeTzeTzeTzeTzeTzeTz
Checks for missing Authenticode signature.
resource |
---|
ef805ce85dd3cb241044e48d1d54e764_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ