DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
697e8575d88ce9791dc20738aea486f2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
697e8575d88ce9791dc20738aea486f2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
697e8575d88ce9791dc20738aea486f2_JaffaCakes118
Size
167KB
MD5
697e8575d88ce9791dc20738aea486f2
SHA1
900b240bea7c1f9f965c4d5ea5fc88e71f6110fb
SHA256
136dab7035aee86f95978f21d547cabf54a1a9fb7f01fa16f2485585ec7fadc1
SHA512
30d7c48c21fc9655bc03d5816093c46b08d712a7c413fead10f47c67492ca447c5d81aa6a0529def5ec5181f775ecbb8383a3825c781f2e8a1e629e532b3794b
SSDEEP
3072:EimVRUrlDrbHU5Iw7vh3rI2fuXxbetFV:Ei2OJv05IotlGByt
Checks for missing Authenticode signature.
resource |
---|
697e8575d88ce9791dc20738aea486f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE