DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
153d876608251818d0c40727f758d575_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
153d876608251818d0c40727f758d575_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
153d876608251818d0c40727f758d575_JaffaCakes118
Size
149KB
MD5
153d876608251818d0c40727f758d575
SHA1
3f0e8d8fa785b071756c57269d3a0ec41af1be2b
SHA256
0a3d53a3109e42a65ba1609cb1a741768e483712dd6ef01f8a02d57e2064bba8
SHA512
8decebeb1e5fd69d5e1bf1d71df7c958f048ab8debd6b995c3011cde0a0c059a76805a36765d3388a1eaf3ec87001f56052386720b1e937034c4621681980574
SSDEEP
3072:qjEo9cXUUSX5xvzI+LBT68QJzMiyAT52NeMzlUlrnu679/kL+6:mveXUBvEEI2NeIClTu
Checks for missing Authenticode signature.
resource |
---|
153d876608251818d0c40727f758d575_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ