DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
19a61d54827fc5ca323ebec673eaeef5_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19a61d54827fc5ca323ebec673eaeef5_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
19a61d54827fc5ca323ebec673eaeef5_JaffaCakes118
Size
69KB
MD5
19a61d54827fc5ca323ebec673eaeef5
SHA1
8058630c90b2696f2c3e677da221457d894ef615
SHA256
ac58a5ed71bb59277088cb1c451f5e2f59881897db2314b1d8812a5a24c00f06
SHA512
88b62d08c8f979bf89485d0ff5af638a42bbc2d4100d6134a75ce2f9e8bb247344e8a3c4640d312eba58e3612eb5db682184b882cc77401455501272c9f9d07d
SSDEEP
1536:3W9kz9quoSkoklNxlrzbN4sIKI4ixwUjhDvvyC1uD6v9A2v4Ow:3W9kzWSkokTxlrz54sbI4ieqxXyC1uDn
Checks for missing Authenticode signature.
resource |
---|
19a61d54827fc5ca323ebec673eaeef5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE