DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
28a3947ba1d9250951b3bb7a04ddcbe3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28a3947ba1d9250951b3bb7a04ddcbe3_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28a3947ba1d9250951b3bb7a04ddcbe3_JaffaCakes118
Size
70KB
MD5
28a3947ba1d9250951b3bb7a04ddcbe3
SHA1
05445e90f434fa2d338e091cd0c428f83fa63264
SHA256
19d1966d49664b7ed29e796f6c4099c440980c13ad1e35287415d13b0a84ef8e
SHA512
4a1fd1552eb1c79c22e9f500923a30bc0128b07b2afae8c011f74f9d31a807fb4462384ac5e69afca56ef150db86d48bf51100d2241dd5a75b473c3189111839
SSDEEP
1536:zfyAqDfwN++q7jhjFFplRr7mWsMiyUipsJ:bHqDfwNlqBp7mq7Uh
Checks for missing Authenticode signature.
resource |
---|
28a3947ba1d9250951b3bb7a04ddcbe3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE