DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
279c407fb0ea34a3a0a5c2a2652db20e_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
279c407fb0ea34a3a0a5c2a2652db20e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
279c407fb0ea34a3a0a5c2a2652db20e_JaffaCakes118
Size
167KB
MD5
279c407fb0ea34a3a0a5c2a2652db20e
SHA1
ff991672c2c55e61c789c89c7e1a6d8742942ba7
SHA256
2963364c451deca584a6c910c03f75210178894912b9f7aa2d1a5b3c41ce720c
SHA512
83e3211eef149e8d4f4a034bed34378db03e48d05b372c9393d6355e37456b57f49ea9a775b9d2666f82e3086862e9ce4d32d59a45de08843915a064881d9cd8
SSDEEP
3072:W1ItXIAWT36bjtVynMdDZUngyB3KNQ66:Wy4AmqbpVQB6Y
Checks for missing Authenticode signature.
resource |
---|
279c407fb0ea34a3a0a5c2a2652db20e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE