DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1b67b68dec6cb344ee163ae79b23fb66_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b67b68dec6cb344ee163ae79b23fb66_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1b67b68dec6cb344ee163ae79b23fb66_JaffaCakes118
Size
158KB
MD5
1b67b68dec6cb344ee163ae79b23fb66
SHA1
96280cc34a5c3e8e77970ff0fcf4edfc06a4f7e9
SHA256
3705aaf03b78908ed2ff08c6e3bdeab6287e901617d128bc219b81fac45b59ac
SHA512
6d5e85223cb97207816a803e323c96d4cf971a8e7ab393172546eebf5db1eb70120df7de379cbd559c93ba0cff302bd9655a3bf112cf7bf9f445c61a51ed71cd
SSDEEP
1536:+Atdy+fDtiPKn1lwc7XQpW/riWECm3qELzJtC+SZeMMcchgHl9KEX:l1fDtpzwfpWTiDLttC+6vMcXl9
Checks for missing Authenticode signature.
resource |
---|
1b67b68dec6cb344ee163ae79b23fb66_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE