DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
75c76abf294cf7d54514537df662cf49_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
75c76abf294cf7d54514537df662cf49_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
75c76abf294cf7d54514537df662cf49_JaffaCakes118
Size
140KB
MD5
75c76abf294cf7d54514537df662cf49
SHA1
03d488a30ec13b365515211e380f45af4d007786
SHA256
1494cb5abd124470d2dac53b8d54d8d48fc44ccc0a11cb3e24fd9df71b12e95a
SHA512
3681ba17f6b808d2c9104030405d6b1790f7c49b81bac4347cd51c1f5913223ac39b8a8c8292d19f650bda03f6f0e62cbf23c23da71a196fcf69c744438ed70d
SSDEEP
1536:iWsZUYKp/cxH40QQgD9AAOwP9RNMRPF0h8k79Pl5E0HW68GVRs/IbU5wP9RN:6UDUjmA7e5MRPFidkRGPMe5
Checks for missing Authenticode signature.
resource |
---|
75c76abf294cf7d54514537df662cf49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE