DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6f73e98ae419ec2fd9081719dab608d3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f73e98ae419ec2fd9081719dab608d3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f73e98ae419ec2fd9081719dab608d3_JaffaCakes118
Size
59KB
MD5
6f73e98ae419ec2fd9081719dab608d3
SHA1
7b16e00535e277a71ab366cd2b29c0a5d7a45a44
SHA256
4d08813ee23d4ca2341798736cbaeedb36f3595bdcf3af8ebc6bb40348455430
SHA512
ce2249676a3d849f7d273fd1dae3d6415da9e99cbe2b9b73a367cf1e26a197d7bb94ce868f73be3fb5be0f093a0272a3c2192a12dd65744425b895eb807f3675
SSDEEP
1536:JIyg4PH6IjateWlMbTqzGSUkSIdqHQ6xVjKr1gsG34:JIYPGtBlMbTQZOxKh3
Checks for missing Authenticode signature.
resource |
---|
6f73e98ae419ec2fd9081719dab608d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE