DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3809d432b3c87e0c6934cc96480a3fe2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3809d432b3c87e0c6934cc96480a3fe2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3809d432b3c87e0c6934cc96480a3fe2_JaffaCakes118
Size
158KB
MD5
3809d432b3c87e0c6934cc96480a3fe2
SHA1
67841103f305650d36ebd4703aa3df04860f5e01
SHA256
408ba902f106510f6797551a960b3b08a4d5b5a4741c9adefa35f4f3c098a426
SHA512
06866401d6134c9fd5753ff4d8f06ad3798b183e8fb02e38032016ef381938e3f269ae838d40584e771ad16acd75a6c82397f10d722a37b767726829e2d838bb
SSDEEP
1536:eGA1QRW7P8+sPrcwx2dErxkzciErpoe91gTEtI1h7shjqRzTGUY3TtDW:eGipP8+sPrcdGxNV9ztARAUuxW
Checks for missing Authenticode signature.
resource |
---|
3809d432b3c87e0c6934cc96480a3fe2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE