DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4559321c473481e8ea48e0a6ce66f63d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4559321c473481e8ea48e0a6ce66f63d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4559321c473481e8ea48e0a6ce66f63d_JaffaCakes118
Size
85KB
MD5
4559321c473481e8ea48e0a6ce66f63d
SHA1
2011525a1071d6cdc68a7b814e0ffdcbecd822ed
SHA256
a11b1582f866bccfa02de3dcf0b22d1825b0fa843d91f74e60cf720ccb33f058
SHA512
8babe2b0e21d69198af60a5ba2710518fe2a6527b75551acccddab3355ee08d07cb3e36875a8b225e01322967cebc49e524b40bbad7aa4f2aa1f52a4141011ed
SSDEEP
1536:7QBiFQqJL29fPGpkk2Re5xRPF0h8k79Pl5E0HW6pOYST6V5Fq3o5pGVSCk7:MitLKGpNRPFidkFT4G3oOSB
Checks for missing Authenticode signature.
resource |
---|
4559321c473481e8ea48e0a6ce66f63d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE