DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
72ae0c885fbc3139d5d439a73533d617_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72ae0c885fbc3139d5d439a73533d617_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72ae0c885fbc3139d5d439a73533d617_JaffaCakes118
Size
84KB
MD5
72ae0c885fbc3139d5d439a73533d617
SHA1
38ab1fa908f3ae316649fb8b33069b5279cc54bd
SHA256
4cab152d68e62e338a8615fdf8dfabaeeadd165dacc3f754209be4f292b7c3a6
SHA512
c3a4719581d64456aebc9d27707786f892d2f2d8f0d2f93ba1765fb2e67f1ce3ae355e491d3de88481780245be2bb4f394a70ed64c72b369d849194f2761aab6
SSDEEP
1536:0nWXs4ZAJyJRVYqOUkSxeoFddb8nPwhg8mc3DkevOR2Y0++IwtE/i:qssbQD/xFdxOPCLfTkei2r+Wyq
Checks for missing Authenticode signature.
resource |
---|
72ae0c885fbc3139d5d439a73533d617_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE