DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
00847fbb99dcb073d0fe0c49934d36ce_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
00847fbb99dcb073d0fe0c49934d36ce_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00847fbb99dcb073d0fe0c49934d36ce_JaffaCakes118
Size
88KB
MD5
00847fbb99dcb073d0fe0c49934d36ce
SHA1
228add56e7f265995c95ea1c1196a91ebff238df
SHA256
00a7421476d0a88d10cdbb233799f0426da51975c0f68423960be3ac1b3bd1fa
SHA512
769012c0f99ad209014deb322d78c7c2f1f738aeec7b1e5195ea58d711ba565ddaa61948ba9d44ed6107fb7edbf8bba93243df54f7d732d565a7f2c94b239b1a
SSDEEP
1536:4JR/sCa4ND7vWN84dwn26WCBBQPnjnEzOPmzwM0TgRvV3xYzpZECWaUakKfGQT7S:4J9F9D7vWN8GcNV3Q7oOP4w54vFxYtGP
Checks for missing Authenticode signature.
resource |
---|
00847fbb99dcb073d0fe0c49934d36ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE