DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2e2b8b5028eb73bd6a6775d1739b4091_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e2b8b5028eb73bd6a6775d1739b4091_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e2b8b5028eb73bd6a6775d1739b4091_JaffaCakes118
Size
86KB
MD5
2e2b8b5028eb73bd6a6775d1739b4091
SHA1
96b9f9a184f590a54457e86d962510a7386ce7f7
SHA256
42ee05f080d258e5ded83830556cc98c6b0b83d648f46af07f1760ea3b06f482
SHA512
f524e7362e9cfc800205377f38565def8e00087c577e63936793ce377debcb148101666529fca3b45fb75ff1557b5e8307ff38b31f5c15f5ea6f7efdfe3cf7aa
SSDEEP
1536:GzwxI2A/gj3z+jbJKMTXuHaTcqy21yrvuZheOPS1bSPPxX3MTXB:c2Zqbr4wjyOyrvuZRPmbgOR
Checks for missing Authenticode signature.
resource |
---|
2e2b8b5028eb73bd6a6775d1739b4091_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE