DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOf
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4903e5232f5bbd61ea7eeefc711d75a3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4903e5232f5bbd61ea7eeefc711d75a3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4903e5232f5bbd61ea7eeefc711d75a3_JaffaCakes118
Size
34KB
MD5
4903e5232f5bbd61ea7eeefc711d75a3
SHA1
a3d7a3d57b30952dc1f274e3b7c508d0aab9a00d
SHA256
a2ec65472c4895df5289acba2bf605f0dfc70f55089028a2d17dc2f1850f81e4
SHA512
3c8bdd38cd5cd0535e3cfa17aabc82103054964ecf1100862a2f4f98613dcc4cc50af063a0007324ad843a5da0c9423b37287d1d5e0ea4706bcfd3ff113c645c
SSDEEP
768:DQoi6qZO1Qegd2xoF/97rX8R3Wy+dsmSJ3+Ae:DQv6qZ4Q3trvX8RAa+Ae
Checks for missing Authenticode signature.
resource |
---|
4903e5232f5bbd61ea7eeefc711d75a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOf
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ