DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1b86ccd885c8be3dc69351e9341e56c8_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b86ccd885c8be3dc69351e9341e56c8_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1b86ccd885c8be3dc69351e9341e56c8_JaffaCakes118
Size
33KB
MD5
1b86ccd885c8be3dc69351e9341e56c8
SHA1
71c4bf4cf0b7ff3c03a7577d81f9695b04ea0ab1
SHA256
1417ca614a9cc908935955651b0d81b409869a43ccef0c18f1220eb9679c10d2
SHA512
7cef94ace17cb48ec0d511b9f928ecf9ddfe975a93a38d1c6e6c41708571adf8ad45f831bca90214a2171fd9560b2fbdc3a94afd6a414ff3196420181492eff5
SSDEEP
768:HsW70S9vqLkJ44wvTNX/9LDVEoIO6be6DBVzVoUp:HjIS9vqLkJlwh/93VE7O6JDnzC0
Checks for missing Authenticode signature.
resource |
---|
1b86ccd885c8be3dc69351e9341e56c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE