DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
0712ad58db342229326824400667c366_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0712ad58db342229326824400667c366_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0712ad58db342229326824400667c366_JaffaCakes118
Size
192KB
MD5
0712ad58db342229326824400667c366
SHA1
11df7520cef0f4cee70aa0d85aaa58fb6b15f24c
SHA256
c9c79e5907dbbd7c0782a14c60f0dd4a02d7ed6e3a96a4f66cdc87fd22458801
SHA512
b196e471b5363d7a4b7d2da96a6999cc102c51c35f71141d931b704fcf6a5e694e3813752b21d92d33995123aca5b2ed1b3b29c82b9a13a94f430200c08fe7f5
SSDEEP
1536:1kfotWtD5jnkfotWtD5jnkfotWtD5jnkfotWtD5jnkfotWtD5jnkfotWtD5j:OtD5jwtD5jwtD5jwtD5jwtD5jwtD5j
Checks for missing Authenticode signature.
resource |
---|
0712ad58db342229326824400667c366_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ