DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2947b80289d079781d5bf61c7dae863d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2947b80289d079781d5bf61c7dae863d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2947b80289d079781d5bf61c7dae863d_JaffaCakes118
Size
137KB
MD5
2947b80289d079781d5bf61c7dae863d
SHA1
9155a4e06086303a2e88a79edc2bb9adbee44927
SHA256
7ef64ef13010418ca7a89e896df5f4607b6dcf184d928fcdfcf17b79f65a7600
SHA512
5e31a394dad76f9cc72c2dbb135c85194df5d913d55cd5ffb419cf010fc4fc250b203f44d322cdc602b50445032742829a68eb14fd8c9dc1b072ca56cda6e7d4
SSDEEP
1536:bmF1qaFvg0W9UEg7xmueuqynH7Ydyh0FTAm5Ua/O9/6oM1wQH0Unmue:2XZFl/NtH7Yb8cUa29BKwbU
Checks for missing Authenticode signature.
resource |
---|
2947b80289d079781d5bf61c7dae863d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE