DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
17a1ae17aa1787467f7bd27b0cf71bf5_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
17a1ae17aa1787467f7bd27b0cf71bf5_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
17a1ae17aa1787467f7bd27b0cf71bf5_JaffaCakes118
Size
217KB
MD5
17a1ae17aa1787467f7bd27b0cf71bf5
SHA1
2144b7464870e08e975a9998de682dcadca7533a
SHA256
7d32bc0dd6561f0a632c05872ea7720464d1c961faf0fcc25f241510379b5739
SHA512
9257ca2feb067bc65f6a87df09e2b58ac9a43839aadf123ede1bafaf4fb492d0098399ffc17c23a39b4507c0bf46c66a671b0e71fa413411c18b03457b47fe51
SSDEEP
3072:El1gfCArl1gfCArl1gfCArl1gfCArl1gfCArl1gfCArl1gfCA:+1gfB1gfB1gfB1gfB1gfB1gfB1gf
Checks for missing Authenticode signature.
resource |
---|
17a1ae17aa1787467f7bd27b0cf71bf5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ