DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6515402d7f169c1b52055a8ad6264b79_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6515402d7f169c1b52055a8ad6264b79_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6515402d7f169c1b52055a8ad6264b79_JaffaCakes118
Size
53KB
MD5
6515402d7f169c1b52055a8ad6264b79
SHA1
01081733257637d04b6b5d580c71ebb09749354a
SHA256
c317d49422c85491f69dbe6019f224e49abd4d9eb8f5eaea2c9c2e53e080c866
SHA512
93f79bde46c6eae529b6e970807cbe49873256328b6a23cbaa31b85fb185434e8b28fb3309e3009a945651eacb4a8751b61827f911200acbc38451f3ffd1b35c
SSDEEP
1536:XvxEYx47v6mKR2wRcAcL3yLE2XFwdEfzPXfhX5/FPP0kWq:/x/x4r6mKf+dD2X+6frPhPckW
Checks for missing Authenticode signature.
resource |
---|
6515402d7f169c1b52055a8ad6264b79_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE