DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a21326ce4462a67fca5d10ae874a4c61_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a21326ce4462a67fca5d10ae874a4c61_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a21326ce4462a67fca5d10ae874a4c61_JaffaCakes118
Size
158KB
MD5
a21326ce4462a67fca5d10ae874a4c61
SHA1
d6c06aa0ec343a3cc6f3279069316fa2002e0ce1
SHA256
dbc5e65e3989b7f7a9a391c273b678453ae3f6f883532b3bab4e2bfc4b791add
SHA512
2d85f09d0bb3a54814ec56b692cf9ed3c7f72f8cd6f18b25ff10712c8b4a269fbaba0024d03b61fb81dd49a694a2ec620bf33f2a626c224a2e258ce500000891
SSDEEP
1536:bej9WpVyAfZwSaIgsKp4jcO+Kv7WDXjB6nAnSp0RM4fOTkxADg:b+SVyrtIgsKbfKv7i6Aa0ukfxADg
Checks for missing Authenticode signature.
resource |
---|
a21326ce4462a67fca5d10ae874a4c61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE