DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
45574c0f04be8559504485117b7e762f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45574c0f04be8559504485117b7e762f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45574c0f04be8559504485117b7e762f_JaffaCakes118
Size
86KB
MD5
45574c0f04be8559504485117b7e762f
SHA1
9f03c5c65b52737f19821bdfecc497098c0a1b50
SHA256
cb5406625fd0466817bd6899d2d230543fc45af625188e439c208e8b403816f8
SHA512
e0fc3a757016f13645a830ac42547845295134f31b89b3f2c9885cb66bd2aa74bcb577f4547eacccd9c7fc280a6a5626e5fa5d58983c3b94d8fa2ea2279898b4
SSDEEP
1536:LmdD9HfAdiKPf+KRIQfn/Ur1MN0AtvWbEm81GovNlhOHxhd7aRIQH:6d+dTf+bQyMNPgbEdGsNizd7LQH
Checks for missing Authenticode signature.
resource |
---|
45574c0f04be8559504485117b7e762f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE