DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a7b5b8289976d275fd962ce68481fc37_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7b5b8289976d275fd962ce68481fc37_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7b5b8289976d275fd962ce68481fc37_JaffaCakes118
Size
85KB
MD5
a7b5b8289976d275fd962ce68481fc37
SHA1
b2cf74af721dab00049ca09a8831d1a010bcd7a4
SHA256
eead88d6dc3b763ed26885d46965f1dd3604493feba6c9f78df8f6b219e28c4c
SHA512
4670321b38da192fabf4961ba146d13dbd5ccd5a1aef850846da1b4879b3955c1182a6663590a3fc7059ae3dda7f4c0748010e1e8f82715572761f0a0aa37c16
SSDEEP
1536:wREp/MZFHfBaxeAVewKoZRueRaW+k/yfuNTuC1Qq0FqfZnygpItKidi5sJlRqr6b:kEtMZpwQABKoXaL2NTPV0FaygpItTiuP
Checks for missing Authenticode signature.
resource |
---|
a7b5b8289976d275fd962ce68481fc37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE