DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
258403c28ead638b0025864018f4888d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
258403c28ead638b0025864018f4888d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
258403c28ead638b0025864018f4888d_JaffaCakes118
Size
59KB
MD5
258403c28ead638b0025864018f4888d
SHA1
c57a2488c9211a755afa23d486d2e5bafb3b0107
SHA256
ac9b1d9815c452dfbc58e4968712f7e3d652647c08f9153f8453a063f7ca208c
SHA512
58f0dc5030b599ff58e370d31d52d68efe9e216275cc94762470bc776d72edd447b38bd1d5b4abcd8362004693b635a50b7e31974c63c0a6839515c91d9572ca
SSDEEP
1536:sIydUercvKurUZwTVX3mkX9X3fmfuRNeeUevgj7HHbX6:sI6UeYvnyGVXRXgUeyonHH76
Checks for missing Authenticode signature.
resource |
---|
258403c28ead638b0025864018f4888d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE