DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
44e9aab5e25244b6274acf6ef6734e3e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44e9aab5e25244b6274acf6ef6734e3e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44e9aab5e25244b6274acf6ef6734e3e_JaffaCakes118
Size
30KB
MD5
44e9aab5e25244b6274acf6ef6734e3e
SHA1
fa836ea06b114843c0cfdec98a8fbdaa5164a980
SHA256
984952b9616609a8452bd9e48b2e55ca2caad80c3229a01774e7a479e5237e19
SHA512
9c3c705daf50882bc951fdce53d2824f12745c128e712c4e1fc16fb64ad7bbf86dcd781758496a05d5cd875479413c5177941cc72a7ff4e04a0b8d0c668efe05
SSDEEP
768:XKSAquOe0GQDarVYSsrExKnKQn3tbeW4QC:tAquOe0GQD6Y5hKQd35C
Checks for missing Authenticode signature.
resource |
---|
44e9aab5e25244b6274acf6ef6734e3e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ