DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2eda76c4f764fe350264eb66b04313ce_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2eda76c4f764fe350264eb66b04313ce_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2eda76c4f764fe350264eb66b04313ce_JaffaCakes118
Size
140KB
MD5
2eda76c4f764fe350264eb66b04313ce
SHA1
2d833474877bf67a3743ff54878319664f001da4
SHA256
0f2cae734e863df10776deee20b96c52c4eec5f834ef7dc38ee61c3224d88214
SHA512
b18d845e75ae509d24fbc1a61adb5ffa39510467421baf84c65994cdabb11b82eb7da4b1d63475f62c167fe67ad3063615cc4b319324647c719a151d31319beb
SSDEEP
1536:ZeKrEbFkyfZu6X6j+G8qEfV4oEwbO3ytY9VKVRcP9yno7O+:ZeKrMW0Zza+G8CoEwb4KVRcPGf+
Checks for missing Authenticode signature.
resource |
---|
2eda76c4f764fe350264eb66b04313ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE