DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
2b74e4ef77e61a294de5f26777e6c31e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b74e4ef77e61a294de5f26777e6c31e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b74e4ef77e61a294de5f26777e6c31e_JaffaCakes118
Size
224KB
MD5
2b74e4ef77e61a294de5f26777e6c31e
SHA1
be79dd72fe5686f877b305e0cb029ea322ddd190
SHA256
438016540771de54160c59e705958c0153ce7cba0a41d361bbb547a3712be8a3
SHA512
a9706b008fed1c24fa42db841726e87b5601e4cb7ced34751c85cc5303752fc21e0282f418a186527b71e24000a5e3abad59659c3ee5f474570dd12b25484dd8
SSDEEP
6144:bz9OoqXz9OoqXz9OoqXz9OoqXz9OoqXz9OoqXz9Ooq:cgggggg
Checks for missing Authenticode signature.
resource |
---|
2b74e4ef77e61a294de5f26777e6c31e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ