DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
34464be1f108fefa63ec62d4ae143b7a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34464be1f108fefa63ec62d4ae143b7a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34464be1f108fefa63ec62d4ae143b7a_JaffaCakes118
Size
140KB
MD5
34464be1f108fefa63ec62d4ae143b7a
SHA1
bbff5d7dc7fb35c6d05f3636541802f35fc3acce
SHA256
ca443c63fe37cfba0cc9ecde2e40655221416534c58a36cdc8a38994bd46841c
SHA512
a6a064f1d051dab38b0c9e9318127e754868e93d41f2ad635f89237f0a259bc6f2dc8044ca75768a4e6eb6a64a14598249dac9cc479f511c3bd9278b7272e8f2
SSDEEP
1536:zDZfQTCBXO3B9vIzKHUa+DAkqu/TD1ydJve2aaPLqlgsg29cA91ucGl:zDJQTCB+YDHHrxyfe2aaDqlg8DmcG
Checks for missing Authenticode signature.
resource |
---|
34464be1f108fefa63ec62d4ae143b7a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE