DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
68c071be44f6f026a79d4ff96d161135_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68c071be44f6f026a79d4ff96d161135_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
68c071be44f6f026a79d4ff96d161135_JaffaCakes118
Size
59KB
MD5
68c071be44f6f026a79d4ff96d161135
SHA1
c0658b0ea540314bd748034c82dd3ec41c40e56e
SHA256
74a45ba19431704bc08c4907373550f2db8a26d73346db0deec6cda4876d8137
SHA512
e03943573163e57d1712b8c38fec4555b88a95caf0009fc208972aa9ffc0a534705b01f6158fb6e4b3ce0aefacdff361ca422bab473be5b7806e88480f0f11df
SSDEEP
1536:2IysZkpC1d1uYZ3MsIG5ET+AboRyzfQMesJcAD1xdyfF9u8zE:2IkpOTum3MsIG5ESA0RcjJfpxdyfCQE
Checks for missing Authenticode signature.
resource |
---|
68c071be44f6f026a79d4ff96d161135_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE