DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
26a25d82c6a90ce6a050a4d6aa6b4e49_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26a25d82c6a90ce6a050a4d6aa6b4e49_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
26a25d82c6a90ce6a050a4d6aa6b4e49_JaffaCakes118
Size
85KB
MD5
26a25d82c6a90ce6a050a4d6aa6b4e49
SHA1
ce1b77161bdede34f482d79e56ad0a6d0cfc7173
SHA256
38a08500d4c40634c93c38f1b1742511a33ae2ffa98a5308dd3f5ddf1a0b8550
SHA512
06aac0c22c409a487b76dd3a31f7edbdd6d5f11d3768bafb92b90d3825ff6d67406e4921a666f1c5099fe727abc8d162a2ec579931553b8a268814411a4dc1b0
SSDEEP
1536:pUsKAHF6OgWRGqK5MD+sz4rbaZo5lXoUn/Bn8xg5iWqUM5W0Tb+9XT5:Ku9K5MyszUbt//B8xd9zWsbcXT5
Checks for missing Authenticode signature.
resource |
---|
26a25d82c6a90ce6a050a4d6aa6b4e49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE