DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
472844d81adec5fc85b2634d641aaf34_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
472844d81adec5fc85b2634d641aaf34_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
472844d81adec5fc85b2634d641aaf34_JaffaCakes118
Size
59KB
MD5
472844d81adec5fc85b2634d641aaf34
SHA1
033f9e705e9d555f6f234a90d45e0fb4b7a994c4
SHA256
e69123e951ecf5524bbb8b208c155ea0f5bd64e80930447acd76a5f2fb6527e7
SHA512
e1bb95560d2f1a91b35561169e63b689b07164a227be2ce5d6418940db3e471d3209d8bdb071319d7bf8c21ac8b4b6e7efc1d09ed42c3259b16ca1751133332e
SSDEEP
1536:6IywIalIt7DeAMft9VnAK5JcAhhgp9vja7:6I7Ib/+ftnAVAor
Checks for missing Authenticode signature.
resource |
---|
472844d81adec5fc85b2634d641aaf34_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE