DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6561c32fe0a1fb758cd74b6044e53896_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6561c32fe0a1fb758cd74b6044e53896_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6561c32fe0a1fb758cd74b6044e53896_JaffaCakes118
Size
167KB
MD5
6561c32fe0a1fb758cd74b6044e53896
SHA1
3ef056ef73ff0e16fbeb62902b6648444cf8aff1
SHA256
53c06a087bbae421641a7de9998b784b1a186f3582695f24040a362228fff266
SHA512
026e2fad88c67a4d3c87b762b82714beb66d20072f9644e5b4ded24b6c0f6de25935afe2c0c1a0edcc3d58646656568fbccb9c3d140091ba74b344ca08666a91
SSDEEP
3072:qbZRB6cneosX68WkGoaKzgHHU63gUBbcrrGfR:4ZP6cetGFKcxcrr8R
Checks for missing Authenticode signature.
resource |
---|
6561c32fe0a1fb758cd74b6044e53896_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE