DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
624cd8738c5e32466ea52ea7e05f8589_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
624cd8738c5e32466ea52ea7e05f8589_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
624cd8738c5e32466ea52ea7e05f8589_JaffaCakes118
Size
32KB
MD5
624cd8738c5e32466ea52ea7e05f8589
SHA1
f14124853303c483fba24935b1acd3aab57ee9c4
SHA256
34fff058c9edc389b10e0fefdf3dce1709186a6f805cfdaff93c81e817919586
SHA512
5bda236103d730c7ae35d5a16c6f6cd2e163d10e1318335d79e357658a85a8ba1c75d0ee970f05296d17f2580328e0901378f8d0976e351abf3cec6ff2dbeafd
SSDEEP
768:ooicqZOIQ7VGPlNHs0b99CZMrgAog8eFos:ovcqZJQQk0bfrg/eKs
Checks for missing Authenticode signature.
resource |
---|
624cd8738c5e32466ea52ea7e05f8589_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ