DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
415cb04e329036d454dd10f7510364d1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
415cb04e329036d454dd10f7510364d1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
415cb04e329036d454dd10f7510364d1_JaffaCakes118
Size
52KB
MD5
415cb04e329036d454dd10f7510364d1
SHA1
904a3df1ca3db35b19201a81e9fabb679779159c
SHA256
00e52beeaad4f08ed531bbb6af172063d30c5d094ff0c03fc7825b224b664c36
SHA512
200fd2d903e0ac2b5b2559d55c9436869a4066b03f7b2045482695ddd155dee0126797b31acc612c7fbaccfb9242ef1e34c8686cf6c7d4de2df73e0f3bab1002
SSDEEP
1536:ttRPiKMH8keE9e0aVGavVSz3QBnOfcyBE1Ex6HHcWm:xnMkeklNSzzfcye1ExjWm
Checks for missing Authenticode signature.
resource |
---|
415cb04e329036d454dd10f7510364d1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE