DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
469ba8846fef1133140ecb3619963ef2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
469ba8846fef1133140ecb3619963ef2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
469ba8846fef1133140ecb3619963ef2_JaffaCakes118
Size
82KB
MD5
469ba8846fef1133140ecb3619963ef2
SHA1
2beb1361ce44f083c237a73fb9a7361b822a0e0a
SHA256
f5aa0b790aa27dea53ee0b52d5e0021203fab7fcbc7fb4dfe4a8f5e3ae0e51bd
SHA512
ee9f6ac33eb46c92a1af68238b374df281bf9fd3781fc2e8f96e381b3dff3618a1e8d31c0916e5bb1f73fae15323515df29fd2cd8b3147381508c6e1e8713aaa
SSDEEP
1536:VU3CncWng22SFLIRQa8QRPF0h8k79Pl5E0HW6pOYST6V5Fq3o5pGVSyRl:VcGRJF8OgRPFidkFT4G3oOSyL
Checks for missing Authenticode signature.
resource |
---|
469ba8846fef1133140ecb3619963ef2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE