DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4858603ed0711ca1f0581ef05e1efd52_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4858603ed0711ca1f0581ef05e1efd52_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
4858603ed0711ca1f0581ef05e1efd52_JaffaCakes118
Size
70KB
MD5
4858603ed0711ca1f0581ef05e1efd52
SHA1
afd0e89ad2e139d27f30b52ba455cbfc51ec2c0e
SHA256
e76ae9ead842505444e60b373075ef0deaa6acb8e8c10b25ed395baacd611fe9
SHA512
fc431f0a989863be1d0eff8fe357034bed71b5d059d8bc1dc5ef273b7ae63cb978dfbebeb157ddce8cbe44d053553ceda2d995ef343a5715d6520939540f2473
SSDEEP
1536:shpg5/r5TyAeGWoFTWeXkaN3HDf9n/jBtHVyJ1KkxF5HVXNOfP1ebOJm:shClrQAKsfXkYf9nVpVa153VdOfkbOc
Checks for missing Authenticode signature.
resource |
---|
4858603ed0711ca1f0581ef05e1efd52_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE