DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
68f3e253fcaffd8e757a5898141eaa88_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68f3e253fcaffd8e757a5898141eaa88_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
68f3e253fcaffd8e757a5898141eaa88_JaffaCakes118
Size
167KB
MD5
68f3e253fcaffd8e757a5898141eaa88
SHA1
e95da18b2acd704a26cdb231746cf4a321e8e3fd
SHA256
4b311f447cc93679d9726f7c8e727ae2c9dd59a151ebb377f04492462bbc0a69
SHA512
fa3f861a87ccb28eabd2a7f03d69f9d39a82e0a8714bb52566d03ad0e7879bf90eb41f8f6b1b0330c4c3256e402add2f36d5b1789572e9d07dad2a427f646967
SSDEEP
1536:Rhm5fK8i086mNGhB0ZwWdavrDnCQr7ScSDfX3vvFmnYhi9hB:Rs9/mPSWWDCQnjQf3vvFrhi
Checks for missing Authenticode signature.
resource |
---|
68f3e253fcaffd8e757a5898141eaa88_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE