DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
21fc8613c8524d79c6b03f2675717511_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21fc8613c8524d79c6b03f2675717511_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
21fc8613c8524d79c6b03f2675717511_JaffaCakes118
Size
158KB
MD5
21fc8613c8524d79c6b03f2675717511
SHA1
f0ef7c0f5b241ddd5685c8fac29a32cca02afb1b
SHA256
7d07c0262fe7e97d145c8f1a24433b341f687d90d540c8a6a354db4ee7c07e64
SHA512
0d2f2a3a9be309a4cae5a135cf0524395963e59e943f246705e4298f533e54907929d14d82b59d2aef37d793b457e50030f645ee11181ba19db6a61433eb5b36
SSDEEP
1536:AZAIa9iBvqEiMTRefUbBFbegDxBJbj5UbBk45p/VXTB9Lk4hRJazVb2//PB2Y:IAxihqEiGReQFbeKxXBgHVrI2RJ3nPB
Checks for missing Authenticode signature.
resource |
---|
21fc8613c8524d79c6b03f2675717511_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE