DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
637be42dd6567b9686b11fac77889509_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
637be42dd6567b9686b11fac77889509_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
637be42dd6567b9686b11fac77889509_JaffaCakes118
Size
234KB
MD5
637be42dd6567b9686b11fac77889509
SHA1
0454c42e6000482cc9dd7a00bcd305d722cb03a6
SHA256
83a6512f378d0c37a4477158deb6ab6a7b4bea30cfc90358142789e641d04573
SHA512
aff2932b4a4171523c4b684605f872d837c4b762f11312cb9d369849906e66b433e86aecfb351c42c905417cd55e5a0fef82c2a1ab6a1f4166deaeb09c725224
SSDEEP
3072:/+PDhu+z+PDhu+z+PDhu+z+PDhu+z+PDhu+z+PDhu+z+PDhu+:2LhgLhgLhgLhgLhgLhgLh
Checks for missing Authenticode signature.
resource |
---|
637be42dd6567b9686b11fac77889509_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ