DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
b891c502588e10535ff9ca42319d2f13_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b891c502588e10535ff9ca42319d2f13_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b891c502588e10535ff9ca42319d2f13_JaffaCakes118
Size
224KB
MD5
b891c502588e10535ff9ca42319d2f13
SHA1
91eb6b073782a54ad92bde774da9e0e08898ea98
SHA256
526ba3b4aad08a44fb0a4eca7ace0ab618500ebedcc59f3a97fe3f50b173a858
SHA512
2e643128769e20977a98193b3386473ca74dd929cc6ac91fc19a0ff7e9efc814e8d1914041a01c0410dd4c63f075431e8ba0b9087eb8cdaab4e533d8b17cb322
SSDEEP
1536:72hilet30egjUo4Lwm2hilet30egjUo4Lw:LejgjU9kMejgjU9k
Checks for missing Authenticode signature.
resource |
---|
b891c502588e10535ff9ca42319d2f13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ