DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
62f3d1bbf8cc366fdaaafc1cd4d2f4de_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62f3d1bbf8cc366fdaaafc1cd4d2f4de_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62f3d1bbf8cc366fdaaafc1cd4d2f4de_JaffaCakes118
Size
86KB
MD5
62f3d1bbf8cc366fdaaafc1cd4d2f4de
SHA1
30fd59867ff94db19726fd2c459d2ed4975bb066
SHA256
be21fdafd6cc9a3870fcb28d123e2b4398cbc1b80d5845d623983b9a8f0a6bf9
SHA512
09dedc90e0d987a9d4d129414b1c2dde79a5722faa080718186227c9daeba5aedcc2f8087024f691fc59b4e50c953704d318408d029e8a56e962e78bb1e0d4c2
SSDEEP
1536:eUQCMlXduTjbmm6UFvwZNraW8Hp4FAeg2w9KKnlLsNSX8Klbmm62:ihdyjbmm6UCZFYpujfw9g6lbmm62
Checks for missing Authenticode signature.
resource |
---|
62f3d1bbf8cc366fdaaafc1cd4d2f4de_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE