DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
07787228f385e583abdaae726e68f256_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07787228f385e583abdaae726e68f256_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
07787228f385e583abdaae726e68f256_JaffaCakes118
Size
30KB
MD5
07787228f385e583abdaae726e68f256
SHA1
2f28a8c93eec22d3bb98fb101efc39a8fcd266f6
SHA256
11798f85985ade178cb0337912de82908f72d3293b7ec9086cb21b095b17e66c
SHA512
bd9d8d73a858c324ea7735d42e11794a05966d864a412208770c69eec6bfbca5107c263841779949081611a7f661df2c12f9736288fc6ed9d2daafd547c30215
SSDEEP
768:xKSqqu4u0GQPnOGbsOL7YhJPaJGf1H3tGrrbdPL:zqqu4u0GQ/TvAJPa+0bJL
Checks for missing Authenticode signature.
resource |
---|
07787228f385e583abdaae726e68f256_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ