DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
1c1f86ab786dea50198bc628fed7fb99_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c1f86ab786dea50198bc628fed7fb99_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c1f86ab786dea50198bc628fed7fb99_JaffaCakes118
Size
248KB
MD5
1c1f86ab786dea50198bc628fed7fb99
SHA1
9957327cafc7bfb282205c49158329919d43316a
SHA256
467d15eda9765127c45663af704636bcdf3d930a1bfd5a51f86c50f35f41ab78
SHA512
e3f4ac15a633735d38acea2a30eea72b9744c355767831842be0ca5f1723ca131fde00eef9a083ea01f8d7d832de40c00cf151eb47aa760d09ef5a8c70ba3f3e
SSDEEP
3072:1NmeLQIR1DNmeLQIR1DNmeLQIR1DNmeLQIR1DNmeLQIR1DNmeLQIR1DNmeLQIR1:aaQAWaQAWaQAWaQAWaQAWaQAWaQA
Checks for missing Authenticode signature.
resource |
---|
1c1f86ab786dea50198bc628fed7fb99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ