DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
37a196ff34517cef0d47399619aec473_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37a196ff34517cef0d47399619aec473_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37a196ff34517cef0d47399619aec473_JaffaCakes118
Size
140KB
MD5
37a196ff34517cef0d47399619aec473
SHA1
7ee0b8b7c1457f3eee0997877c9d0a8ab82d2853
SHA256
752bd1ce2945f54f5b41513a7e9112d7b297bd5e26ac57c940c2db236efdbc72
SHA512
32ff0451392e1f4950bcf3aceb5fd6c0e92d994b3b6d6f5eaf7514a9c70f308ed30e30b05dd2f6aea4ade22d93c478cf8c3d116022b028ee46657b023afa8818
SSDEEP
1536:4GI4sIqTipef+QcxRPF0h8k79Pl5E0HW6eH/o8QkP5:4GpqFfVcxRPFidkPosP5
Checks for missing Authenticode signature.
resource |
---|
37a196ff34517cef0d47399619aec473_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE