DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2fab1102f769fb300602131479597601_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fab1102f769fb300602131479597601_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2fab1102f769fb300602131479597601_JaffaCakes118
Size
140KB
MD5
2fab1102f769fb300602131479597601
SHA1
65eff090bb0fde49202ae25f9496557a9329a493
SHA256
79597b594dbd799e28b1f229515ee478c572e22817a2242b64fed546b2d6c473
SHA512
3772115b5b4d5d0eb1290ce837dc8239f897e9257278c8cb787b214a689eeb3eb0399112b085841b9016405852c66c78b845d0997b78441cc3ac1b5ecd5589a2
SSDEEP
3072:JnbyaYgj9HtztKHfUCaDLqi7joqyNgvTzE+X:JnVjvhKHMhLHjoXCTo+
Checks for missing Authenticode signature.
resource |
---|
2fab1102f769fb300602131479597601_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE