DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3ee88cc797a6b9c9791c3baaa8d762ab_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ee88cc797a6b9c9791c3baaa8d762ab_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ee88cc797a6b9c9791c3baaa8d762ab_JaffaCakes118
Size
59KB
MD5
3ee88cc797a6b9c9791c3baaa8d762ab
SHA1
066433429b1045a5a4e8656eac3ca2c4baf90a60
SHA256
85f59369b53445fd73198195d58c5393a331e52dd79c2d6c3d2960333a510bbd
SHA512
29755653b75504bd57af0a1ad5079ed6f04167522e874eb3303d9bd453d5744bd3f87bbd9a9cf880e1683e0bd6a7084820871d5303f423391a4a7296e9c79689
SSDEEP
768:MKzy7Ec7U+wWh9Z3tOPmYYTGw6YJ05/mBnoPKr5oCkMwb0ry2Fp9ooizC0f8RHar:MIy8G9ZUPxoPJ0xQoy2vbBoEC00RHfi
Checks for missing Authenticode signature.
resource |
---|
3ee88cc797a6b9c9791c3baaa8d762ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE