DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
268cdb8b412e6fa575015ed4ebc3a3aa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
268cdb8b412e6fa575015ed4ebc3a3aa_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
268cdb8b412e6fa575015ed4ebc3a3aa_JaffaCakes118
Size
67KB
MD5
268cdb8b412e6fa575015ed4ebc3a3aa
SHA1
f9c23dcae4ff9c26da359ece3d7f5066f92358b6
SHA256
d0e674d52a781c13ac9e89566e7e94d8e839a48e43d0716ef2481a11d7749952
SHA512
9a97ab4204a8cd5d99c4b9ad1bfd17e3896012153140bbdd8a7b3116dddeacaba672dc88749398452bc3c785257a7e86c89499911c249a82bdfe5926cc36f9e1
SSDEEP
1536:3NhPMzzuSgtHb0OEcfZpcv/AHVSZgysup3FH5tqZb8KtSSBCVgJUD9A:3NhPMzzuSgxbJE4Zpcv/ASZ3supVZkZ5
Checks for missing Authenticode signature.
resource |
---|
268cdb8b412e6fa575015ed4ebc3a3aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE