DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
736a406fde09cee4d760d25e9c4fb3a0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
736a406fde09cee4d760d25e9c4fb3a0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
736a406fde09cee4d760d25e9c4fb3a0_JaffaCakes118
Size
86KB
MD5
736a406fde09cee4d760d25e9c4fb3a0
SHA1
dc549229a5d45c82aafb938489d8e6f37483cb8b
SHA256
f9f4fa5e7959e2a866d7a6edc6f60984f55ca9ac91fb8e8e9acda8ae59572a0f
SHA512
097ad1bd0bf17a8c4f5d873c2f8aab39234a7c2f5c14be264b8c48dc2d4c0d9b2b18a2b263dc80bab0faa87889d413bd5a43e1c0d78a3db96b086afb41611c99
SSDEEP
1536:CZY/Jz8XoIOpXELxcrZOFCUdc5lZWmMHmiwiJL31gkBLgZY5un2x/+x9qPGzB8MN:CS/JHxhEM4eJHMHmijJL3ekB0ZY5ug/I
Checks for missing Authenticode signature.
resource |
---|
736a406fde09cee4d760d25e9c4fb3a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE