DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
71cb6a253e783e13048ea9bcf8db123d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
71cb6a253e783e13048ea9bcf8db123d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
71cb6a253e783e13048ea9bcf8db123d_JaffaCakes118
Size
158KB
MD5
71cb6a253e783e13048ea9bcf8db123d
SHA1
a67885d9b7a4b77d21858ac295c02af4f996ae1d
SHA256
251c5756886e6396a08f4bfdc0abc30ab1f02f7ae8aa7bd8eb7a182439a37db2
SHA512
28283a7ef6707a53336b5d70c2f29b7c3a756c0b5992a7050c8345661ec2087716bd72ad6ddb548b9c3d03b2378ca5640f6c9b2e6df70218530a10ed5ef9ca4c
SSDEEP
1536:yDCEouRCPsiHICK1BfYJ7XIfcXyPYjc1Pby51eEn6pLyKjF1qCK:JhDLABfYNIEX2YY1+51ey6pLyKjF/
Checks for missing Authenticode signature.
resource |
---|
71cb6a253e783e13048ea9bcf8db123d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE