DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff9
JmpHookOn9
Static task
static1
Behavioral task
behavioral1
Sample
4146cc921cc1accc52fc5afb77ea39c3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4146cc921cc1accc52fc5afb77ea39c3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4146cc921cc1accc52fc5afb77ea39c3_JaffaCakes118
Size
146KB
MD5
4146cc921cc1accc52fc5afb77ea39c3
SHA1
f57e2b06ee05de44c35df39335b5fbb446de10b9
SHA256
e4d5f81b91885faea6bc10928729623c0cb78c4fefd4ec47bbc8b4eb27061660
SHA512
8e28d31b0849d04a88103cb72f157aedbad744a5b4d180e8d7e7d919a99a60324814ff97fea995ca6b2893a0eb837c23d32092102c9013cd782771e4acbfef9c
SSDEEP
3072:fs13rI+Vonnjy14YfKgREcBTOw0bnczerM+QvqxHqtB9IRpaXvHZuFXWIr3gls:23+8LfH/0E+qX9sOqWls
Checks for missing Authenticode signature.
resource |
---|
4146cc921cc1accc52fc5afb77ea39c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff9
JmpHookOn9
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ