DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4a7beb42cac85aa3b1c74ceb680daf42_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a7beb42cac85aa3b1c74ceb680daf42_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a7beb42cac85aa3b1c74ceb680daf42_JaffaCakes118
Size
85KB
MD5
4a7beb42cac85aa3b1c74ceb680daf42
SHA1
4ac5703a95d34244df9eae6b34c7cbcfcf01b90d
SHA256
cb980ab218d760d9650ba0f0691c5c68ed7ce82380416acaf9341c719c1e4ae1
SHA512
e51f58558da1f6bfd4630fd7478f8b31971eeb0d9b264d5254cd81a81465f0a637b8ea7baa3d6f75fcd734f3901ddd099554a695df5daf5b1a9f100850142fbc
SSDEEP
1536:606TXHlg5yeVC5jXy9E5KMrssz4rbaZo5lXoUn/Bn8xg5iWqU5IT3bpfLZ4g5jD:6TTXFg5y952a5TrsszUbt//B8xd9AITr
Checks for missing Authenticode signature.
resource |
---|
4a7beb42cac85aa3b1c74ceb680daf42_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE