DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
dc54786356ecf8853c50746260834bce_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc54786356ecf8853c50746260834bce_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dc54786356ecf8853c50746260834bce_JaffaCakes118
Size
227KB
MD5
dc54786356ecf8853c50746260834bce
SHA1
0d935cbc46289d0ee99cfd7929fbee2c44b025a0
SHA256
7e164bd4978071a7adae9a0df45a2210d278de0cf253def7d5ba2056c8194ba2
SHA512
c2259b6be784e4bbc464d435a9b20509e8b6976c6840abc1c82dddc7efc85593ed15bbd57663bba8e14cb6761cf908186686f3bd05568841319d5617bd8ed4b6
SSDEEP
3072:1WjsOZgWjsOZgWjsOZgWjsOZgWjsOZgWjsOZgWjsOZ:1WjsZWjsZWjsZWjsZWjsZWjsZWjs
Checks for missing Authenticode signature.
resource |
---|
dc54786356ecf8853c50746260834bce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ