DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
03fcc2413a78ef5ad1d7229ebef1c65a_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
03fcc2413a78ef5ad1d7229ebef1c65a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03fcc2413a78ef5ad1d7229ebef1c65a_JaffaCakes118
Size
158KB
MD5
03fcc2413a78ef5ad1d7229ebef1c65a
SHA1
fe0550d07fe5d1ab4dd5a2f9aedc65102a81242b
SHA256
8c755189e3e3f0c8a5a99ccf799b52e666c4f443a76bbb708e789c7585f129a6
SHA512
7b656d604195129f0f64cfefe7e628e582fa266f39c73bf5d47a29a490edd992a10eb5e44b98cde8fe11243a501d68a6b3ab61ab33d50a1c70f2f24522bce690
SSDEEP
3072:iIxWhefJsNMp3KxRTRqfUfGorEsMsIg1cjAp:iIxrfiNgaTRUUfGogkT
Checks for missing Authenticode signature.
resource |
---|
03fcc2413a78ef5ad1d7229ebef1c65a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE