DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4c3c72382455494a97b649423c5333f9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c3c72382455494a97b649423c5333f9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c3c72382455494a97b649423c5333f9_JaffaCakes118
Size
167KB
MD5
4c3c72382455494a97b649423c5333f9
SHA1
8abd910f4cff78fe8e7e6c02b91d6669b2917c66
SHA256
0d7b7ebc292e36b3605f4cad285002a03b3b644dddb04819e349bc8d552d294d
SHA512
dcc67d55b85987875d740b04eb367ce56a4708be676e1dd991b831714fb14489c1201bfc8f7dff4c69152f7f8c6d70f86b053c8e4ed4491c7958e432efcd7871
SSDEEP
1536:6UIbqwWV77ZdJXqFlv/9SgbxfB6WlkjEfU2LCQFteHPTZCU0UiL3e0JBpciZoYnZ:cS5DJiv1kQkjE82WeuPP0UiLuaBfCU
Checks for missing Authenticode signature.
resource |
---|
4c3c72382455494a97b649423c5333f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE