DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3d8b1741214d69f463673e1b411af9bc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d8b1741214d69f463673e1b411af9bc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d8b1741214d69f463673e1b411af9bc_JaffaCakes118
Size
85KB
MD5
3d8b1741214d69f463673e1b411af9bc
SHA1
46b5773e6d0e8d8741ebba0fff17e20b6c22ffca
SHA256
8170ca9e6b7d37af04579b147e6a5a896ffae177f2e63cbfdb08e1ddf180e4f2
SHA512
219fdd58f60c3e5ba3b70e16eae986e8ce38180c8252290b2e05d2f2131c03393db2e574005d5db07f25ca81cff5b5a3b34ef1309e6f5cc0be4ec073d45ec8dc
SSDEEP
1536:ab5UHh4jzRBV+tAkgPXgGCMLESD3Ql8BTLuFxncEnpll/7Qf66ALgPXZ:aMzgvgQLJ885NiplJQS6kgvZ
Checks for missing Authenticode signature.
resource |
---|
3d8b1741214d69f463673e1b411af9bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE