DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
449d2787630bf2faca6ad1abe639f893_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
449d2787630bf2faca6ad1abe639f893_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
449d2787630bf2faca6ad1abe639f893_JaffaCakes118
Size
234KB
MD5
449d2787630bf2faca6ad1abe639f893
SHA1
e1ab8e41efca2c74e3918e57ace556dffc4b7ccd
SHA256
c67304e7d7d94d812ce292f68e2d92c33ad582d458f7ee07b0612229d504cc3a
SHA512
060ed03f74b7eab002f778cdf404223f9ffcdb66e42ba011ed323b62c473c6cb7b70d17f1cc284062f4cce26e65f3c6cfcb79c9ba2e1c0b5eacf29fc1280c465
SSDEEP
6144:7xkJCCJCFZxkJCCJCFZxkJCCJCFZxkJCCJCFZxkJCCJCFZxkJCCJCFZxkJCCJCF:7xoCC6ZxoCC6ZxoCC6ZxoCC6ZxoCC6ZJ
Checks for missing Authenticode signature.
resource |
---|
449d2787630bf2faca6ad1abe639f893_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ