DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a03582a8a00ab514791efcb82a85d151_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a03582a8a00ab514791efcb82a85d151_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a03582a8a00ab514791efcb82a85d151_JaffaCakes118
Size
82KB
MD5
a03582a8a00ab514791efcb82a85d151
SHA1
1a3db3003595a5f7c4a1c77682ff449545d7ee4a
SHA256
44440a068fe9b886318ca0bb387c91dfcec7fd45bb15574c34c46876c887ee1a
SHA512
024dc29c2264ab38d2ddd0165bc0935ee20e658ea2b0e0ded082e7b03b70fbcecff1f79fa70abde5cc55a9151abf9b1b80557953b9b8677511fe587d13aa05ab
SSDEEP
1536:NZt2iU2P5QghAb2xHBpxwnSH+TTLnYXhNfIusqijJ/7NBWSJHvG5PBys2SuemH2:h766BpqStvIhDxNBW0Hh+5M2
Checks for missing Authenticode signature.
resource |
---|
a03582a8a00ab514791efcb82a85d151_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE