DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
324249e3a3e22ae04c74bb27e00d162c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
324249e3a3e22ae04c74bb27e00d162c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
324249e3a3e22ae04c74bb27e00d162c_JaffaCakes118
Size
158KB
MD5
324249e3a3e22ae04c74bb27e00d162c
SHA1
7d3d7a28b90e07e3b96890c55f3fae175cfa0349
SHA256
7d8102056ae5a91b483b0f5757651f0cfa92113153eda334b812db4ca767d5f1
SHA512
6ca32270d01154bd7c0cf02f2069c45473cfb0a3b9a47a2cc76c1746226e3f45ba841a281b585ce1ff3de78aff314d49b9cbd9d3da93f9956076ce920f00188a
SSDEEP
1536:kl4Nv8Z3y2gCDbwcWL8dUpqusrwi0J+FQgzQ8kUzHjJY6FsDpxwc:k08Qsgl6hrwi0wFQgU+HXip2
Checks for missing Authenticode signature.
resource |
---|
324249e3a3e22ae04c74bb27e00d162c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE