DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
8338b00a8bcf86d449b6f08848a4f3b0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8338b00a8bcf86d449b6f08848a4f3b0_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
8338b00a8bcf86d449b6f08848a4f3b0_JaffaCakes118
Size
167KB
MD5
8338b00a8bcf86d449b6f08848a4f3b0
SHA1
25f66e61df1e90d6884f1917f6bf5f1a0389341d
SHA256
b423eeb4ed5c576b82f5af8468274092be52e8bd641689d282d1fd0dde5d2e91
SHA512
a2a8bc7747e92ed18d86458270209561d2e89196b2c7a641a2a02482bfdd160646043fafae490b63af5f729a5795e057b2da529d77747b4eb34b23297bb8b987
SSDEEP
3072:jQGWFXMUdvV6P5k76H8iljOXQumeZppH:0TNhY5O6cQOXxmOT
Checks for missing Authenticode signature.
resource |
---|
8338b00a8bcf86d449b6f08848a4f3b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE