DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
68aa3f0e8766bae5f82fe85e9747ad8e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68aa3f0e8766bae5f82fe85e9747ad8e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
68aa3f0e8766bae5f82fe85e9747ad8e_JaffaCakes118
Size
86KB
MD5
68aa3f0e8766bae5f82fe85e9747ad8e
SHA1
5902c5f92820124de3fd0ea80b4430abb349672e
SHA256
2de1be5e2b6c67075b89276d146d8d519953d77a633d7cab1e1e744f6200c511
SHA512
81fb51d8f8c62af8b8317806b98490845d0c01959f31e785f83f7ee9845bd86f23c282c6520bb22d9922e2b0717897e0af6f2cb03d6746a7dcece6b5da80946c
SSDEEP
1536:iI+MVBgPvGy308F4/vIRuwqD1cjoknaVI8Mi8fFzl7kCjL97Y8c08UJStCso3D3U:x+MLSGT8FSvPrD1cSnMi89zlXPbFktfj
Checks for missing Authenticode signature.
resource |
---|
68aa3f0e8766bae5f82fe85e9747ad8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE