DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
447da01528e121e3956090467b760925_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
447da01528e121e3956090467b760925_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
447da01528e121e3956090467b760925_JaffaCakes118
Size
167KB
MD5
447da01528e121e3956090467b760925
SHA1
6130ceb66774afec82926c8b473127350c6e08a4
SHA256
85fa0a47ea30fcd89c7ea9068b675d557045a8b140afbc4a26bee024c34a355f
SHA512
f38ef7d2d35b56ab841f7c9364fc67ef8c9a7f84e15ca8f8a280c1c8f4393aa146783a12fc294ecefc566ab7f76b3fcd7e7e6e13a0a2a141b992195b35e2bd3e
SSDEEP
1536:nb0ySXFulHEnqXLcLXuXtTlFfZLylol7LVpgKCzGlVvifpzVVbiCLoV:fS9q7czeZPy+xLV6KCzc8Vb
Checks for missing Authenticode signature.
resource |
---|
447da01528e121e3956090467b760925_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE