DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
762621efd9e400cbfe48d99b13c59a13_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
762621efd9e400cbfe48d99b13c59a13_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
762621efd9e400cbfe48d99b13c59a13_JaffaCakes118
Size
140KB
MD5
762621efd9e400cbfe48d99b13c59a13
SHA1
42aad0d54fbc5abba5d248cc177e893995075bb4
SHA256
cea00f06cc6d68be7a34f80c075c08f3bd782872f16beb05c72b251153248eea
SHA512
66bbbf2f18e78be203f16798fe79b74865fd24913e43b59fc4ee6d49c0fce4c529b8527baa60d11887e8f8492d5ae178bc5baac669f66a6a3d32e6641e444d00
SSDEEP
1536:aL8TVKSeunMJWgbb5sYHR9IDsEZc0fcmrCYZbqBFwLX1NIb:dT82nMUgbb5sckDrxRGYr/Ib
Checks for missing Authenticode signature.
resource |
---|
762621efd9e400cbfe48d99b13c59a13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE