DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4c8cc4e20bf59a13457f8f992540d739_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c8cc4e20bf59a13457f8f992540d739_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
4c8cc4e20bf59a13457f8f992540d739_JaffaCakes118
Size
87KB
MD5
4c8cc4e20bf59a13457f8f992540d739
SHA1
ebd868696dc17c8bbcd4724893121512256a7f00
SHA256
2eb53d4c1f6ef7a79c3f7629d65b3690b2d0df7601d32793951902bdca4f2e49
SHA512
fc607c85e33ade87a72acfe7a5623c8c896cc162d129d8f639df7085614d224dc78e0fed43d69f9c3064ee5794d2fa4322264d666844a84510b90294b993a4b0
SSDEEP
1536:cUvLIf+x3kzY9UMQtJ3N4BcFVBJbMWen+rfIgdQnmE9X1Vl5OJr1rP:cwvxkzYmJ3aBCJbsn+rfIgEXO1rP
Checks for missing Authenticode signature.
resource |
---|
4c8cc4e20bf59a13457f8f992540d739_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE