DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2bc918337c5b416db5b6144bb14b4116_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bc918337c5b416db5b6144bb14b4116_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2bc918337c5b416db5b6144bb14b4116_JaffaCakes118
Size
154KB
MD5
2bc918337c5b416db5b6144bb14b4116
SHA1
9a6a473913900c2c96eb122b0fa8361aea32ad3e
SHA256
9062e0d52d6ffc061427054c82608dd7207f82b3d48e08be95600634be2e727a
SHA512
da90aa50e8ef9a954291193b4915962cc5509f48f4285f52152d0fe4b09ac5879422f0cfa4eb3523b5f323234e7f80201898bb0926fd3c6fb8e4c060aea65e10
SSDEEP
3072:RjEomM4U4mZI78aAVMlc8MF+dWcTG1hgdyMACrFny89y7:xviUo8a26FTghgXXrFnT
Checks for missing Authenticode signature.
resource |
---|
2bc918337c5b416db5b6144bb14b4116_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ