DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5cdcc9356eb3a84f726e3887c08605aa_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cdcc9356eb3a84f726e3887c08605aa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cdcc9356eb3a84f726e3887c08605aa_JaffaCakes118
Size
158KB
MD5
5cdcc9356eb3a84f726e3887c08605aa
SHA1
9a0b3e5147c1dd67049e539c8398019a3d78aee3
SHA256
02b1c9a7626e3bbbd673921bbe0e0586a738a3ecefb52f210e7a85359f27b759
SHA512
22cb7112958e00e565a46c38b496431505dac172d153e28c37dc23325602413d493194299810d66f6a1c6d5c03cca89c5e0f81df739367f51acf646c4a437a4d
SSDEEP
3072:P5bLCbwDcn1QEDh/ha/Apw5vkqwITGljY8g9:P5bLHC1QMpaYpw5cNVljYP
Checks for missing Authenticode signature.
resource |
---|
5cdcc9356eb3a84f726e3887c08605aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE