DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
668a95ef95bb807f80ab43771736aeb1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
668a95ef95bb807f80ab43771736aeb1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
668a95ef95bb807f80ab43771736aeb1_JaffaCakes118
Size
224KB
MD5
668a95ef95bb807f80ab43771736aeb1
SHA1
ddae3ee13f6942841553f9b33bcbb77cf0fd4136
SHA256
1358ef9f76e3648d9986aaee744aecd77b66c0b0140e901c9a198dc8dde1da66
SHA512
aa45847cde6fbb0e09889731485af524891e9013c294813aa914ed99d592556b96fea711e23fc9e60f1f03d28acb6c1f0bc3cf6bbfadaa860b3dc80d21942492
SSDEEP
3072:OtD5jwtD5jwtD5jwtD5jwtD5jwtD5jwtD5j:OtDytDytDytDytDytDytD
Checks for missing Authenticode signature.
resource |
---|
668a95ef95bb807f80ab43771736aeb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ