DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2a0471b32dca05cd545f931626017940_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a0471b32dca05cd545f931626017940_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a0471b32dca05cd545f931626017940_JaffaCakes118
Size
69KB
MD5
2a0471b32dca05cd545f931626017940
SHA1
809dbf46e9dff12bdc3940194f815bb552c161a8
SHA256
1fa9816c1c2f640c22fbef294e91502ebc2e569e70afca7bade22423e12a0aba
SHA512
4cae15835b6bb784c96f8d2d98e85723abd008119d98ec9e04358b466d9267d5256a7ddf56ad83f3bb0551bbb5169dbd3d29e4c6a17a1c1c483baaf2ce39ef03
SSDEEP
1536:4HCqbjyhRXkJI/oPNxc/HWXX2Zy4uHq3EeAGEboKPQ:4HCnhRkG/8N2+V4d3XKP
Checks for missing Authenticode signature.
resource |
---|
2a0471b32dca05cd545f931626017940_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE