DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
61c37681d7fcd3780d7999852423c768_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61c37681d7fcd3780d7999852423c768_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61c37681d7fcd3780d7999852423c768_JaffaCakes118
Size
140KB
MD5
61c37681d7fcd3780d7999852423c768
SHA1
cac6ad8035096ab1fde76f15f7a0b9787fdf2b9a
SHA256
54c613aad416d9bd0f2c70913ea8be218da5ae8aac4e6d05b164dd9ec2ac91c6
SHA512
a9fe30168f291bb92e002314a0d5ad5a64c974c0937b402277ecc52828f972e6137c16d4f9cc582b0bf7ae3686c53a6d049ec762571726663b3f3c970d802e2c
SSDEEP
1536:3siyG9s27bEQ0IvsNm6QqgjM06/kP/Q74kCi5JPGI4kf2A3KHOs1Zn+EQJBPzO:3sd27bH0vQ6MgMnksr3M+jSzO
Checks for missing Authenticode signature.
resource |
---|
61c37681d7fcd3780d7999852423c768_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE