DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3811e708d7f1da9b073f1863fb24e2f7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3811e708d7f1da9b073f1863fb24e2f7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3811e708d7f1da9b073f1863fb24e2f7_JaffaCakes118
Size
87KB
MD5
3811e708d7f1da9b073f1863fb24e2f7
SHA1
276265d37f51c2792ac35e0c4c3d02916449ede2
SHA256
fde09adea2846f1aabeb2b8fb830eb3f2f5ee34a68f71a8dc37cfd731c88cb2a
SHA512
4a67281341a82bc05148848f20eacc9460bd9bb386f4bad39573da85e2df5f20d1178394919599811b7d50325f867c5e8754ca1124eb581cd715c922ea0173a1
SSDEEP
1536:vqfi5GfyPsuPaHMi7a0u8Ksz4rbaZo5lXoUn/Bn8xg5iWqU3y3qjm05bSpvgi7g:vHtPs3MIaD8KszUbt//B8xd9F3qjX5Ig
Checks for missing Authenticode signature.
resource |
---|
3811e708d7f1da9b073f1863fb24e2f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE