DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
03c71238b6a18f579d96e7bfc6ddce52_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03c71238b6a18f579d96e7bfc6ddce52_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
03c71238b6a18f579d96e7bfc6ddce52_JaffaCakes118
Size
59KB
MD5
03c71238b6a18f579d96e7bfc6ddce52
SHA1
29747eda7ef87da960b19b2b798a7ff60315fcd0
SHA256
72963f256922d0cb4b7e32fb4b01e8e0607265ae08cdd71860b04b3684041017
SHA512
5a78280e0eb335e047e43c9921e0577f8c362e5b33e3a02001242286bb591ff923852e65157a8429df6a7c0d23394f991d23c1014928c4e279f1a23659686884
SSDEEP
1536:xIyoVXUkaKtqu+jr4GH4/H2kwBdJyPx69qRg:xIFVXxqnjZ2HuXyPx/g
Checks for missing Authenticode signature.
resource |
---|
03c71238b6a18f579d96e7bfc6ddce52_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE