DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JHookOff
JHookOn
Static task
static1
Behavioral task
behavioral1
Sample
851786360e3155a75694f54274d5012c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
851786360e3155a75694f54274d5012c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
851786360e3155a75694f54274d5012c_JaffaCakes118
Size
159KB
MD5
851786360e3155a75694f54274d5012c
SHA1
2b2f197414cdf82b396e0376dda440656dcdc459
SHA256
0ccbe1dcd5df4dbd48136bb8411a881ae2c8a0f1630f531f041a9a5a1b51624b
SHA512
fb8ecdddc04957c654ab9f226f251c1282f8e9afede35d0732d6c7011818d44a80cb011589486ddaf9f6db31cab91ed55e453f9b2628ed8f146140ea82122495
SSDEEP
3072:tSYEPXcPiWUKrhQ1orvxR1eHW/z+qk8RUAYeawilSDuxRUW9DHmUyL:YYCXcPiWUWvXM2/z+MUzS1qx6
Checks for missing Authenticode signature.
resource |
---|
851786360e3155a75694f54274d5012c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JHookOff
JHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ