DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1768687b160b194a69c902a4e362109b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1768687b160b194a69c902a4e362109b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1768687b160b194a69c902a4e362109b_JaffaCakes118
Size
154KB
MD5
1768687b160b194a69c902a4e362109b
SHA1
fac3e498153fa98c935c1854fa76f47e04dcabe5
SHA256
972300f201e2a84b7852d3730b9b36b73d4967d128f8346476b972969150f522
SHA512
209d9babad94aa1232331cec1e9337355bbcc3edbeaf9d2c82c04922fa0f3a3d981821f3aaf3bf930087e92b1acfdd599622cf012375e7df02c268d93a32e96d
SSDEEP
3072:RjEomM4U4mZI78aAVMlccMF+dWcTG1hgdyMACrFnO89y7:xviUo8a2aFTghgXXrFnn
Checks for missing Authenticode signature.
resource |
---|
1768687b160b194a69c902a4e362109b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ