DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
66e248c7aee56612e6b74d71b1afdc62_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66e248c7aee56612e6b74d71b1afdc62_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66e248c7aee56612e6b74d71b1afdc62_JaffaCakes118
Size
42KB
MD5
66e248c7aee56612e6b74d71b1afdc62
SHA1
dcb65112804ab4b75e1bda86bda316cd5ba5b489
SHA256
3bf2b6e0dd756422595714b4c489ad7bd2d5bb3c43d4787e1de65e10c3dfebd5
SHA512
5719c59047231aee7a3807af4f96cc593733d21184725aa17401e0ab710543ec78a13b08383a4fab4094aa4811f96854b68a67c738548e6aa124607c9266b75b
SSDEEP
768:MAywq8QGbupOIVXf2+Uv2n8hOXbl+HM5KTtDu8hE8RcpP1ii:MXwq8QAylUv2mc5MtCIE8mRY
Checks for missing Authenticode signature.
resource |
---|
66e248c7aee56612e6b74d71b1afdc62_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ