DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
b40cba80adfbdb5be3b94106faa935e3_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b40cba80adfbdb5be3b94106faa935e3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b40cba80adfbdb5be3b94106faa935e3_JaffaCakes118
Size
273KB
MD5
b40cba80adfbdb5be3b94106faa935e3
SHA1
09251a5a3aa066c95c7c8e81d1b821b049af99f4
SHA256
5f1699d88685b56b62e834e49933378ad230712b3f399b82f4a1d24dd10315d9
SHA512
492da4ebb8710999ee979a709300877cd273919f473e66d5cf7bf1f3e9952e1a021573c36f876f98cbac7bd3c44605fd74fb04ec28c4196051ce29e2435f8f2b
SSDEEP
6144:qxgKO92GG3v0exgKO92GG3v0exgKO92GG3v0exgKO92GG3v0exgKO92GG3v0exgF:qxgKA2GhexgKA2GhexgKA2GhexgKA2Gh
Checks for missing Authenticode signature.
resource |
---|
b40cba80adfbdb5be3b94106faa935e3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ