DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
05ee910664b29fe4b1870eaaaa5641a0_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
05ee910664b29fe4b1870eaaaa5641a0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
05ee910664b29fe4b1870eaaaa5641a0_JaffaCakes118
Size
33KB
MD5
05ee910664b29fe4b1870eaaaa5641a0
SHA1
472af75e7a0b1012de89f4fe066ca44263e1bac0
SHA256
bdc3bdaef9050a9e6f8cfd4f42c97346b9172c7b2538388b8c62b7192fa39d8a
SHA512
0525c576d2cc4049080f0c314103f4fd8491b23b2605056b0e601182e8ef447562a2406f5a42cf6d5e0e3694afa77f8997a118ac9a57dd39bf4ffc0220ef2d12
SSDEEP
768:coiUqZORQnYgpryN2NFRtLrePyQe6/yPEUUNll4Y7:cvUqZgQYo5tLr2le2GYlWY7
Checks for missing Authenticode signature.
resource |
---|
05ee910664b29fe4b1870eaaaa5641a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ