DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
eb8d2fbb69426b55cefba83cabf2f54a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb8d2fbb69426b55cefba83cabf2f54a_JaffaCakes118.dll
Resource
win10v2004-20240319-en
Target
eb8d2fbb69426b55cefba83cabf2f54a_JaffaCakes118
Size
85KB
MD5
eb8d2fbb69426b55cefba83cabf2f54a
SHA1
e3352e5ec390627f2690dc65b971cf7c11652571
SHA256
a9c184289c049b088feded8e1a1f77999c6c335821a4be0b07307bd55239e3a9
SHA512
182f0cb574ac56d84d30cad411a1b7fbdec078ddba8a957c61d83b5e8379799214d4c90c11e275a7c3d43e2362698aec2437909929f98281cc2c42e09eeed1bd
SSDEEP
1536:TpDT+mEQwhUqRrU/VUAdCAYjCYZlCdkbb/fcOZJNCWJGJ4iHi3A3mz29T4:9DimEQsU8U9xgnmYZJrkgNCW+4i54
Checks for missing Authenticode signature.
resource |
---|
eb8d2fbb69426b55cefba83cabf2f54a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE