DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4cd0b0e46659a3a26c6b0900c802cb4a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cd0b0e46659a3a26c6b0900c802cb4a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4cd0b0e46659a3a26c6b0900c802cb4a_JaffaCakes118
Size
86KB
MD5
4cd0b0e46659a3a26c6b0900c802cb4a
SHA1
128c48a023d3104224e5cd51dbd8b41a9dae5cf1
SHA256
7362468c5690e26b677493c230a47bda15597660abbf5d160196d4531b0abff6
SHA512
d0b2e30d390be815c591ecb6c4976e0cac292ba89da927c75046f13f27bd2b8af079518c24bb721498a7e1d470d2591de548dc95b997e7fe8768e0d7f73178e3
SSDEEP
1536:N53qqrwt5ptG+O5gy7lB07RNNhFznwoF4kipTpVKrVcjS/Wgk8:NZvwt5G+Oz7cTlnH4kcPSV6S/WN8
Checks for missing Authenticode signature.
resource |
---|
4cd0b0e46659a3a26c6b0900c802cb4a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE