DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
04b075251fdeb68969169cb815fb9e84_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
04b075251fdeb68969169cb815fb9e84_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
04b075251fdeb68969169cb815fb9e84_JaffaCakes118
Size
82KB
MD5
04b075251fdeb68969169cb815fb9e84
SHA1
ed4da988946e26b84e141c0d22c47706d5c8bd5d
SHA256
e8490a16c32eaaf2b08ada98c85ed1afb84b3c88e5b637bc1c5fefbb9d2369e8
SHA512
5f59824c926dc9636d3d9a672b684bf505feeb5a3ba36fc2e67a7d0cc1931c7c0268ba3d4f46f50a6c3d363e1f34c9bf2b1b6047bcb722fb04e30d917b2b08ed
SSDEEP
1536:KFphCsonwUlNEzxWdrAvj0RPF0h8k79Pl5E0HW6OQ6tCT:KvGvmvIRPFidklA
Checks for missing Authenticode signature.
resource |
---|
04b075251fdeb68969169cb815fb9e84_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE