DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4bfbe06234b25ff50afb73994b9d0ce6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bfbe06234b25ff50afb73994b9d0ce6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4bfbe06234b25ff50afb73994b9d0ce6_JaffaCakes118
Size
22KB
MD5
4bfbe06234b25ff50afb73994b9d0ce6
SHA1
d4e83e34fc5879ec98aff212280886ffa0e660d4
SHA256
edb936338f46bb211b5ed310e3e4d24c8d4b8bd5feb3a9906cc865246a6ae9f2
SHA512
f63ef1835996030a8c71dc19a943d032f9a69f4be1af4118fabb98692e47260e7974a6563428856901a6c5874b291edbe5cd062f3b376d666ed9a873ddafc1db
SSDEEP
384:7Hdxz0C/EIqd+1ZzQ2DtkFQagHnN1WFP9tb6zWkJFljLIMAztdrZqry:7cC/FqdShQMaiN1WrtbyRmhtdrge
Checks for missing Authenticode signature.
resource |
---|
4bfbe06234b25ff50afb73994b9d0ce6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ