DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
292265c102328b211f8f3ea9201453d2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
292265c102328b211f8f3ea9201453d2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
292265c102328b211f8f3ea9201453d2_JaffaCakes118
Size
88KB
MD5
292265c102328b211f8f3ea9201453d2
SHA1
f2df847a8221c2b3b2bfd2a49b81eebb95951972
SHA256
ae75d9bf544f391b27daab0d1310170df71c6091eb784ada0f26bd019585346f
SHA512
7099d4e2fb5d86fd6da5e6c2d10e30c30ba11dea31e1614ab24f44ca5bd617e2f095e678baecb392b79257221981f2dfa14b8323d5b843a932a05035cb8e6659
SSDEEP
1536:Faycrjq2eFtpNooHhbgfwKJO9eblbrhGh0JEo9LPlc9/tw5J3c4qZBidA6d5wKJW:FUHqVDDHhbgYKJZblbdGF2L0/twnD26W
Checks for missing Authenticode signature.
resource |
---|
292265c102328b211f8f3ea9201453d2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE