DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
484ce7b8a366339720d55355e448a8c0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
484ce7b8a366339720d55355e448a8c0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
484ce7b8a366339720d55355e448a8c0_JaffaCakes118
Size
167KB
MD5
484ce7b8a366339720d55355e448a8c0
SHA1
0d73d9974164943ae7d527c17e51de5625c716ee
SHA256
eed3214d6fb0ad54e2cbd470ce5c46ac0ccd71583dbce16f44f695ea0ccb11d0
SHA512
d1d68d8bd222352df0ce9cde80c310739f5e0defa2c4396638be0037a57ef1f8f053ea17becd0872305d208e66d6cf6fd5a9b9909df12e2101d106b069286433
SSDEEP
1536:bYyvlfWYv9pJcLee2jxzEL6d5HBNfeioFBUpINWAg30Sv0M8p5T8YoZ4:9lfWKruLee+vxBg1hNNy0SMN8
Checks for missing Authenticode signature.
resource |
---|
484ce7b8a366339720d55355e448a8c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE