DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
727c92c52260489d7a13a1e6102f66f5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
727c92c52260489d7a13a1e6102f66f5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
727c92c52260489d7a13a1e6102f66f5_JaffaCakes118
Size
87KB
MD5
727c92c52260489d7a13a1e6102f66f5
SHA1
73fc7a9cadf30f21d7ffa94678cc744d0240f14d
SHA256
0da2e4d12055875d9b7ad862e7b083ced4f719abac13d740e145f8bdbf22bcee
SHA512
4b64cd148fb6b8e774c10aa06509270ae591cfcc7a06dc8c1a1aa8e7881fb085a2c96512f8a11e3390bf8b50f219f8e3f4ac00f4641f70b9a55e067f71e21529
SSDEEP
1536:f+Rm8wUowsnqHbh3RxT3yOwWM2OIxa5/ECpUTGyQo2MR8m7vLzNq:fIFwlnqHbhBx2/WM2TxkEYym48mHzNq
Checks for missing Authenticode signature.
resource |
---|
727c92c52260489d7a13a1e6102f66f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE