DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a1c8d3e987be002e87cc4e028d51df19_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1c8d3e987be002e87cc4e028d51df19_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a1c8d3e987be002e87cc4e028d51df19_JaffaCakes118
Size
140KB
MD5
a1c8d3e987be002e87cc4e028d51df19
SHA1
842f4983b87f17c618b3b1ba1b9bfc97416f6c2a
SHA256
03de21976bcd8d9618821c77dafe1e904725c5a467cc54c2aaacb1553d95238d
SHA512
4b39fa7d7cb3da6b96bc636e8b0820c3ea8fc48a434006ed832f0eb6d37114e65a6a94ee590d0e335698c8ccf1d70208dec4d8ec829930dafe1f224170279a31
SSDEEP
1536:zECzWgEZeGevyjlyjF3OR+3odIHc3oK7RfFWP+JsqnLQvkKWibj45lyj:YQgeXvqyjFe8oAmo43JsqnAkGw/yj
Checks for missing Authenticode signature.
resource |
---|
a1c8d3e987be002e87cc4e028d51df19_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE