DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
407a9cbd1e6389c42da42b590f8fb947_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
407a9cbd1e6389c42da42b590f8fb947_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
407a9cbd1e6389c42da42b590f8fb947_JaffaCakes118
Size
59KB
MD5
407a9cbd1e6389c42da42b590f8fb947
SHA1
f33db852de54447a3b8659bcec4410c5b86a9127
SHA256
cc0ef58414ec28610f66b05ddebedadfa11a5a8889619dc6b9e0d798036f3c87
SHA512
68223847fd5340b5c8b7fefd3e0b903d2ef2b0fe79ecf5fe1cda8e78e7cd8f9feef2c36ac5a52b100ce2807b1b0af563cecb5422d8900bdf5bdb0d1086c9b2a9
SSDEEP
768:vcKzyQ6YX2C5cQs4/x6xxKbhZaQ7ONqtUOx4IHQaJJkMsshd+CwpP22/c:UIy05517usbhM6Ug4WhQCwpP22
Checks for missing Authenticode signature.
resource |
---|
407a9cbd1e6389c42da42b590f8fb947_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE