DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6fb7b5ed632be38fa1ec2603fb964365_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fb7b5ed632be38fa1ec2603fb964365_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6fb7b5ed632be38fa1ec2603fb964365_JaffaCakes118
Size
72KB
MD5
6fb7b5ed632be38fa1ec2603fb964365
SHA1
e076795d2bb878648540bf52317162224ed0eec3
SHA256
0b399f9eea2c4dfa4bb80b1101192e6fc19fdfae34d1939169fdf67181dd99ba
SHA512
752a5fa8e02877fadc36a1e0cd126c8c8a7aaa084008a726b98bb133d3d4aea43176fed08fc717f55e68b0edc5909f04c960c684c5c63b7dd2a15620b1818d7a
SSDEEP
1536:6gxyJbVOu7IyPRm47kLAlpFv7hnCQMQACEEgVGYcFeyQ4:6gxWVOu7372AlpFvNmPlQYcFP
Checks for missing Authenticode signature.
resource |
---|
6fb7b5ed632be38fa1ec2603fb964365_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE