DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
639d7364b1d97cacc7618123de2b2fae_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
639d7364b1d97cacc7618123de2b2fae_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
639d7364b1d97cacc7618123de2b2fae_JaffaCakes118
Size
158KB
MD5
639d7364b1d97cacc7618123de2b2fae
SHA1
5c5abdb4139ef0a7d00bfe8a150a2ce621e8c675
SHA256
99c0bc2e15ba19f43d90012b6f2dc9a70cc37bef61ff02037d74697c11a4cd9a
SHA512
118e4a0f473857edd6d5455f56380f318c4f461d6b99f564ef0238ac9e76843f5337fc30134f3bfdbf321fca6a921bcc28feb8c13da18d060780dce6d98a64a5
SSDEEP
3072:n1Rp0VFxQD3wBszUbt//B8xd9SQ7ykDASIGl3w:1RpSFxQD9a//B6AQe85
Checks for missing Authenticode signature.
resource |
---|
639d7364b1d97cacc7618123de2b2fae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE