DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
aa4b4faaccffdd633ac463819ffc070a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa4b4faaccffdd633ac463819ffc070a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aa4b4faaccffdd633ac463819ffc070a_JaffaCakes118
Size
86KB
MD5
aa4b4faaccffdd633ac463819ffc070a
SHA1
bfc9b0ffd5a8be0513c808f5ad8244566ad5226d
SHA256
ddaeb20969c5391d91d5083ac6626b8ffe05cc9f75e75d9ecde9223951b230a1
SHA512
c79918f061e9c267b3aa69425d49e184ccf51a2f7518dcea733a3c3cc051ddbcf1b2b37ecba57322ce26985fcbdf2060acfe1cbb3a70774d22d12305e993258a
SSDEEP
1536:F+pBamm6EsUwU+eqgrbsz4rbaZo5lXoUn/Bn8xg5iWqU+yQimTNqg0:F+nPERIdgHszUbt//B8xd9w+TQg0
Checks for missing Authenticode signature.
resource |
---|
aa4b4faaccffdd633ac463819ffc070a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE