DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5e5544af9112515f8ad91778fe78c9e4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e5544af9112515f8ad91778fe78c9e4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e5544af9112515f8ad91778fe78c9e4_JaffaCakes118
Size
167KB
MD5
5e5544af9112515f8ad91778fe78c9e4
SHA1
d437b9bc06fef83b52f9dbab4915bae640f349bc
SHA256
92845d0a916344ea0a400a5b379bb256c57d4462095d8ba85e21e11f519b1d09
SHA512
177f500790ea5d5492c2e2363e679227b6ef7aab0eaec55e2b614d9f300a687dc3595524e96f72be47893b94f558428fafbaa16a6db4adcd906a782f4b43a43c
SSDEEP
3072:eu7sF8YEMo9/dhRVTXfPODi45n47THkplNY:W8YED919LnyEy
Checks for missing Authenticode signature.
resource |
---|
5e5544af9112515f8ad91778fe78c9e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE