DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
5e68027e8dc00a997368885f21234679_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e68027e8dc00a997368885f21234679_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e68027e8dc00a997368885f21234679_JaffaCakes118
Size
213KB
MD5
5e68027e8dc00a997368885f21234679
SHA1
7ce56fc681b7df069d95967f8c85d863577f78da
SHA256
83ac489047ee855537b973d46128abc16ee68340d00d6c422496ccf50bb59e92
SHA512
1d9c60645b0b5fcd0e5099623a4a37f0ed08e3a898be6af0a82a247fbae3d9e511bdad24d998d2272580b6b76d90ce0fb289fc5d74d4fd43ed0fede74cb6b874
SSDEEP
6144:t049gk3049gk3049gk3049gk3049gk3049gk3049gk:t3Z3Z3Z3Z3Z3Z3
Checks for missing Authenticode signature.
resource |
---|
5e68027e8dc00a997368885f21234679_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ