DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2a389a590fefd618fb72c547f9a99f08_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a389a590fefd618fb72c547f9a99f08_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a389a590fefd618fb72c547f9a99f08_JaffaCakes118
Size
140KB
MD5
2a389a590fefd618fb72c547f9a99f08
SHA1
7def18ab930e9796da86075ce1ba7b88549f5ade
SHA256
a39d65a19fd7cb61169be2ad2fb125760ca7170af2c757cc396c5b28a8a65e0f
SHA512
da5913aa9eb9b9d24fd81b920402e284b70415d6a456eb1f1302d9a6ae44643c6864748bb7830354293a92789417311f3fa3fa4bc82711b2eb70bb71866f9498
SSDEEP
1536:JTXt5GWKmwNDUPj/Aw9NOjF/Dk5+WqVoHiLQUNi:5GWK+j/A0NOaILH0
Checks for missing Authenticode signature.
resource |
---|
2a389a590fefd618fb72c547f9a99f08_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE