DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
29523a353f8cbba751cf1cf71a3b386a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29523a353f8cbba751cf1cf71a3b386a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29523a353f8cbba751cf1cf71a3b386a_JaffaCakes118
Size
158KB
MD5
29523a353f8cbba751cf1cf71a3b386a
SHA1
a07d9be7af583ef2a3072319004f2a231db66360
SHA256
e8f77123b0fbf9b75c1bc29a5bac42fa3345a92c54db2fe97435c6948068b65f
SHA512
52d93d60d4520587e1a408f5305fa4c95891a717bb96b63ffcd5ae755e847ffd574554a038bea0dd7c703b0db872081f09eb139dd9fc19a991217d106ccf3263
SSDEEP
1536:7wxsoxR9Id864+ZlfDb1SZG2p5iz70cy6vEiMkwX9pAxvLernHaoANdyhGD6+Lru:7wxswLhCBPnyg9wtWgHhArecr+n
Checks for missing Authenticode signature.
resource |
---|
29523a353f8cbba751cf1cf71a3b386a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE