DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4ca24bd5e3978bb6342b342a8ac66d96_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4ca24bd5e3978bb6342b342a8ac66d96_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4ca24bd5e3978bb6342b342a8ac66d96_JaffaCakes118
Size
89KB
MD5
4ca24bd5e3978bb6342b342a8ac66d96
SHA1
f81d0d51ab17de3e6dc49fdc5c03216e0c85444d
SHA256
0bfe9ac91438f758851d521a172750f75157d3937e1153bd1f465801c53d96e6
SHA512
1fde006ed594f5dabcd6dc0a5b5424142dc421f74047608f17ae7ba95a55ed34e68b3b93abcda4bebfc53243c7580129b5f9a19ff72903e6fa08d7664c812bfb
SSDEEP
1536:TFzFThPjMvrABsMgYws9HYGvS0btjoLDQHaLaifbVRpMiXjTQmg0/O6Oo0NtxH9s:TbhPkEBsMgg1YGvbNEDQH49VRpMiTc/W
Checks for missing Authenticode signature.
resource |
---|
4ca24bd5e3978bb6342b342a8ac66d96_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE