DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3a49e073cc214c2f21e6e300b417979f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a49e073cc214c2f21e6e300b417979f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a49e073cc214c2f21e6e300b417979f_JaffaCakes118
Size
86KB
MD5
3a49e073cc214c2f21e6e300b417979f
SHA1
b27616e4a9239737656a5af914779588f9d62b81
SHA256
21814cc09191e5f314aadd1ceb6610b97326f143d11b7ae1222de697943d8bfe
SHA512
c29562e89a890a25c634f0e84828cb667ef5d06882e03e7f96cae7a5fe1757a79de4d862ae4aeaac0df28df9a911672502d93008e52d05d021e67b36d3f850d6
SSDEEP
1536:0/TP8ugq5h0iljWKIECZgQudigN7LvlVN0owuuUAucWK:070u/0ECKm0diEiow9ujK
Checks for missing Authenticode signature.
resource |
---|
3a49e073cc214c2f21e6e300b417979f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE