DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
78a465527ff7f18f860494b652eda88b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
78a465527ff7f18f860494b652eda88b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
78a465527ff7f18f860494b652eda88b_JaffaCakes118
Size
87KB
MD5
78a465527ff7f18f860494b652eda88b
SHA1
350d37cfc3a4673dfb65ba1273ae0816f1e7bf1e
SHA256
c05ae50b9f214f111927edf1617c6e0d633c59bdf2578e9f1d72c3bf9a9665b6
SHA512
1b52f07a929c6aad617514967e4283b801e8212a5959e0b63fd6e32d0596e22d8dcddea94ce812fc5be5c497aee7eecbb40c9dc983e983611a4980019f49d2a1
SSDEEP
1536:eJwH82rPPs6yihZqcUrHA9gL4adMqYZLfPbj1Qpvo748M1mCNoag5OcJtRbfGlf7:eJwp7UOUTARa0Jfn1Qpvo7480HNnGFbM
Checks for missing Authenticode signature.
resource |
---|
78a465527ff7f18f860494b652eda88b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE