DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
64b99706a9f12d51424d16608369acb1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64b99706a9f12d51424d16608369acb1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64b99706a9f12d51424d16608369acb1_JaffaCakes118
Size
59KB
MD5
64b99706a9f12d51424d16608369acb1
SHA1
03782486ac0fa2705f72e413e0d88303e260d5e9
SHA256
5e26a72cebffe59ed77731df3405e812dde5a035952c9bbb395c1bf7c034c64b
SHA512
85715df2693e4b33ac0562ad903fc8d242566c8b08e2daa2b4da7445be8bb47930275ab03194df207b6d5b94b85a10b3ab907763b009e4a132aa7af809df9fe0
SSDEEP
1536:BIy4zmG29pv56VEzIp5kbTreXntOB0YgXxCOwIK/XnvEIRpx:BIT06VEpzeRXxWRPF
Checks for missing Authenticode signature.
resource |
---|
64b99706a9f12d51424d16608369acb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE