DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
83b7b5cf57927ce54b3525b03b1e768a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
83b7b5cf57927ce54b3525b03b1e768a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
83b7b5cf57927ce54b3525b03b1e768a_JaffaCakes118
Size
90KB
MD5
83b7b5cf57927ce54b3525b03b1e768a
SHA1
292327b2d3b8b792c72cfac74c5d6cdbd03aadd6
SHA256
4d8a02224cd57d333b8293cb31ab3fa97e5736abd6b59fcbf35c695763ca2e9e
SHA512
2b6a6aa200912262f525b5b1b8bd37de5170ef406547243483d735150aef727b53171594589d51d9d948f5d0546b930ceefb33b8e205d7fead320c8f3cfc1e34
SSDEEP
1536:FmIGjWej/9dXqDE8YYVTOECMAD4S835W+7ivTKKn04bgML/RVTHaFYNkelPdQTaH:sqej1dXqAiVTOErSSW+7ivTP04g4DaO5
Checks for missing Authenticode signature.
resource |
---|
83b7b5cf57927ce54b3525b03b1e768a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE