DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
4ac169fe0674e8d5f64b85d0b54c16ed_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ac169fe0674e8d5f64b85d0b54c16ed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4ac169fe0674e8d5f64b85d0b54c16ed_JaffaCakes118
Size
220KB
MD5
4ac169fe0674e8d5f64b85d0b54c16ed
SHA1
c33589c3d9b14f5baf0307d36dae782d11051868
SHA256
b735ba0a2428103cb7a5cd387233c900b6728ff51f14a81f2d52448591f49b9f
SHA512
da8f3b33b5f3de82acd1c5a6d7384744e203ec04fa12a026567515be882741450749ab02a2d123bdf7bb4ef95dafa78a0b2ce457719d0c6b37de1e1e1d84cba4
SSDEEP
3072:UvkYQtKvkYQtKvkYQtKvkYQtKvkYQtKvkYQtKvkYQt:Uvj7vj7vj7vj7vj7vj7vj
Checks for missing Authenticode signature.
resource |
---|
4ac169fe0674e8d5f64b85d0b54c16ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ