DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
b941299595d71bd1529e635d050ab357_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b941299595d71bd1529e635d050ab357_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b941299595d71bd1529e635d050ab357_JaffaCakes118
Size
217KB
MD5
b941299595d71bd1529e635d050ab357
SHA1
af3e7e1c373dc5b4d37dc20659796acfe9472474
SHA256
8202f5c4044236e8dd13560de7b710349fa93432ece01547784179e5e9ee4869
SHA512
2d5ee79fe3d6ae8884e79cb7e4bf1793df0e844d9d8407366c7a39d7f9e95fe1dea8f05411d28fce4d1b36cf394168a3b8ac4f9f648520c5957da3ecd5fe9a91
SSDEEP
1536:RkfnbmWA1lDkfnbmWA1lDkfnbmWA1lDkfnbmWA1lDkfnbmWA1lDkfnbmWA1lDkfc:aAbUAbUAbUAbUAbUAbUAb
Checks for missing Authenticode signature.
resource |
---|
b941299595d71bd1529e635d050ab357_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ