DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6fa61c497a2eb78f121adad9fae6b20c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fa61c497a2eb78f121adad9fae6b20c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6fa61c497a2eb78f121adad9fae6b20c_JaffaCakes118
Size
81KB
MD5
6fa61c497a2eb78f121adad9fae6b20c
SHA1
823bba5524ed9132c02cc5c61d78ec11e9fe5936
SHA256
6f9878c6bf86c3f1d44573fa2b58e7c67c06f95dfd2d634eb973651d9e067e0c
SHA512
8cacbb6ea7f5c1cd1ff729dca1d2e33ff8214d1b4c8e856f4745df99ba3878ad9dfac88265125d966fd805a16fff1959814b473f740395ee0be49496c45b9398
SSDEEP
1536:rou8FhW8YDfpbb7JJaEQZ6XzemNGDv6cvIY+zttMvTroVKPwZdvmJcS:su8FsDfp37JcHwCmEPIPzttM7roAPwTC
Checks for missing Authenticode signature.
resource |
---|
6fa61c497a2eb78f121adad9fae6b20c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE