DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
30fcd4132d8d101c966d6a6bad57621a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30fcd4132d8d101c966d6a6bad57621a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
30fcd4132d8d101c966d6a6bad57621a_JaffaCakes118
Size
85KB
MD5
30fcd4132d8d101c966d6a6bad57621a
SHA1
4f9b7e3f4e1e492297b6a55e9ee9025d710e62b5
SHA256
281e27437fe4044bfcc5052a85a29f0f445717f7d33ed0e8e7d26ac485ea0796
SHA512
7f668083374f76b96506693e92646c737429464f4db5d1e3fe20298ca5bd33da59628403b98d4521b42b6ec07c148df59252158a9728cd2b06f22ca0e96c6b6c
SSDEEP
1536:jCRUtytWkdiVBWiz45qFgofug4j0XglHv1o+a/GSbkQPfPWhq7r4TwOmMnEeTugh:e2yYkELz4Wf4ugp1o+xxQvWhq70ZDz4E
Checks for missing Authenticode signature.
resource |
---|
30fcd4132d8d101c966d6a6bad57621a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE