DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
23e3a8990210f946f5e394254c56791b_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
23e3a8990210f946f5e394254c56791b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23e3a8990210f946f5e394254c56791b_JaffaCakes118
Size
158KB
MD5
23e3a8990210f946f5e394254c56791b
SHA1
7351f5e8e049c372c7781b8fa23206fdbef55852
SHA256
c06a8613f3ab6d7fc9056531873cc32b9f12737e475ba32d90e7b7385661391e
SHA512
51566075aca6a3b46fa2ce7c27ec3110d66e79c35ca40c94a3c3252f8acd95381fa975f0de94d4d5bd5c7c76c7ea55596b5940149972ef2f007f22f91703da8e
SSDEEP
3072:CjxV0quolcMq++DaameUnjnIgZM/nGU53kq+:CjxV0q1lxqhDaVtFZM/nX5Uq
Checks for missing Authenticode signature.
resource |
---|
23e3a8990210f946f5e394254c56791b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE