DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2e9f559a3f91cbe6c0c3c51716462f0b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e9f559a3f91cbe6c0c3c51716462f0b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e9f559a3f91cbe6c0c3c51716462f0b_JaffaCakes118
Size
140KB
MD5
2e9f559a3f91cbe6c0c3c51716462f0b
SHA1
feb1a34b36ab0e4c91acb8b25a9edee64073ccba
SHA256
e402f29fc25bc7b87365780c7d4a502ce50987994c75abbcaa3aaf20a3b751d7
SHA512
1eca1ada3e1e6097ca43b22c7244efd125d70586cfd29409bf0d3cab2272407e3fa98a701733d2eb5fa01dc3fff911643cc5bd24e15343763fd543503697db73
SSDEEP
1536:E2HOiFwTkBPUxcBMMOyGS4EIwRPF0h8k79Pl5E0HW68O1RahuuYGS:E2HOkLPpMMPOxwRPFidkFOPahuB
Checks for missing Authenticode signature.
resource |
---|
2e9f559a3f91cbe6c0c3c51716462f0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE