DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
85b8420f53e3dbf43db3558436f7dd94_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
85b8420f53e3dbf43db3558436f7dd94_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
85b8420f53e3dbf43db3558436f7dd94_JaffaCakes118
Size
85KB
MD5
85b8420f53e3dbf43db3558436f7dd94
SHA1
b9e1f474f7184673620f6f4a4bdc172e2a6ea6ad
SHA256
cffbd9e906e6953346558e8e5f1c7e8a7a5b12e1938b2a115f9d54b9b58be912
SHA512
d2611dbacb966b0c0266c3b2392456b81b44be122b3aeda1626ee8edf7f5d51a53ee0f6f8e35cd835b14740112029bc27923eb29cb5f63d338d0efedda0277b2
SSDEEP
1536:EjOj6pbk7oFVaNLZ6KOocQXrn5G2i7IC0Rj2Kh6dZjLUE6Tk5ZwkC7rv5PQXrY:QOIbk7onOZ6U900Rbyjo/g5Zwr7rv59
Checks for missing Authenticode signature.
resource |
---|
85b8420f53e3dbf43db3558436f7dd94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE