DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
78b6ada17cccc151443a8c902c479e06_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78b6ada17cccc151443a8c902c479e06_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
78b6ada17cccc151443a8c902c479e06_JaffaCakes118
Size
220KB
MD5
78b6ada17cccc151443a8c902c479e06
SHA1
15b8b2690e713b522c2894028029380bec02566c
SHA256
36e1c30200b1cd1d40cea7bce60c3cb4e413e68839e9ce1d6929987bcba73fd5
SHA512
b20e272786bfe5bbba2b877044afda970c834f7c0c65c67a99ad579c021d20719208f643cf5bcef14a81bb03a77e9ee3c4a0f3755c328e972adf60e4e72bf6a5
SSDEEP
3072:w7Ej7M7Ej7M7Ej7M7Ej7M7Ej7M7Ej7M7Ej7:w7Ejw7Ejw7Ejw7Ejw7Ejw7Ejw7Ej
Checks for missing Authenticode signature.
resource |
---|
78b6ada17cccc151443a8c902c479e06_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ