DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
823ba70733a16392e6fec6d8f29c0e45_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
823ba70733a16392e6fec6d8f29c0e45_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
823ba70733a16392e6fec6d8f29c0e45_JaffaCakes118
Size
90KB
MD5
823ba70733a16392e6fec6d8f29c0e45
SHA1
69b8f0cfe854cc9e7b4a8cd44652f254800752e8
SHA256
a1e6a771b65a529c46552c222fe6cecd3b0d72f33821b76614a72d62e0f470c2
SHA512
d9ec51742b954f6c5e356692aac7ee7e6daedb999a3b08079e05d66f46acc77da1bd41b2dcb7bbb25cb179a7d5884f0132c6be0a41913fbc89c32a27f08bb1ed
SSDEEP
1536:PgMmLC+QuOZGKI1FHDSJckAe9WPxGzzhaB5QCXqh34tvSoy52lHcr9ITAeRv48y0:Pg3LCUOZPSHCZUPxbL03k5yElHcWrRy0
Checks for missing Authenticode signature.
resource |
---|
823ba70733a16392e6fec6d8f29c0e45_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE