DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4c6e6017b3502c124f4249cdb72738f4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c6e6017b3502c124f4249cdb72738f4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c6e6017b3502c124f4249cdb72738f4_JaffaCakes118
Size
85KB
MD5
4c6e6017b3502c124f4249cdb72738f4
SHA1
42abcc9ce829eb1422e755693d20513e735c06fe
SHA256
fa95abd22da0f44d4c8daa6e5eae4a62fe4269b2b3fa21454336ade7f8ce75e2
SHA512
78f4cb4bcb21a6223e5a06a6a835e7995e9347224d3a891eefb72b5ec8810df2a6ce2c17cc4f829eb98ef6de3c0fa52a31e55958acdd79b1c92a4897e3817dff
SSDEEP
1536:cZ3vUmDDS6+9HXeAWzntT3q+IRJQCyzf3d/P0W/TI4kISKJzboH1UzntH:cZ3fDS6KevtBIRJkLd/PN2KJzbu0tH
Checks for missing Authenticode signature.
resource |
---|
4c6e6017b3502c124f4249cdb72738f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE