DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a6f3b9d58f1a47aac2dc19853beb628b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a6f3b9d58f1a47aac2dc19853beb628b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a6f3b9d58f1a47aac2dc19853beb628b_JaffaCakes118
Size
88KB
MD5
a6f3b9d58f1a47aac2dc19853beb628b
SHA1
05e3d3864fabc4e1305e60c2f14568acfd6b953a
SHA256
2cc3c3848ab674add2b72937ccbaaa9534bd81858c3eba3618d5bcfa89df8740
SHA512
b26005702560dbd1b46da0cf6b775cdcd64ee02d785376425eb843271f9fb5b835189726ba1be03b9ee5d34e24627ef300174ff2951bde6f3f28323f24d920fa
SSDEEP
1536:kbNZbzCqaz7O4lSaAeYHMITVtKoythnAbko7JjeH+nfXaOgCrxsBYGGplHMw:kbvbz27O/eYNxtUthdh0SOgCvGglv
Checks for missing Authenticode signature.
resource |
---|
a6f3b9d58f1a47aac2dc19853beb628b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE