DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5a650d2eb62a88950f44f58e54695810_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a650d2eb62a88950f44f58e54695810_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a650d2eb62a88950f44f58e54695810_JaffaCakes118
Size
82KB
MD5
5a650d2eb62a88950f44f58e54695810
SHA1
d31d65c2ec60d90160948a75c3f23f391a38f550
SHA256
6ee2ac7917b8db042cfcb85ca2dae299e301f435858d218d54401e553f9e9e39
SHA512
bee858d1c253f53cb22301d44a8dc35d726cb4baaf5b4663547b1f00ab75981a97dd244ab554d565aca8453da4faea1ace48bbf5f35cdf22b13621d698647c7f
SSDEEP
1536:qcG22Q11MrnZDGzseWpPCHGRPF0h8k79Pl5E0HW6HSD/eqz3:7G22z1vZRPFidkWo/d
Checks for missing Authenticode signature.
resource |
---|
5a650d2eb62a88950f44f58e54695810_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE