DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ab11c8be861772be462175deda935388_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab11c8be861772be462175deda935388_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab11c8be861772be462175deda935388_JaffaCakes118
Size
91KB
MD5
ab11c8be861772be462175deda935388
SHA1
04314ce268e70ba35c21dd951d54dd82f4be056c
SHA256
78bd77b42ff0927b4bedeb4360203413c6d51002c1a6ac4b4bb4ffd8788ff652
SHA512
06e47fc2c00cba6cbb5e5993bed0ab719c000a9c637eae0c9a7382187b451bd8df4cb1ce46a9b3459b9937cf45761c2ab3f8c9db84774fae6e5fc12093c98d6c
SSDEEP
1536:hMb05MR3KshWAZPaSsUOcjrN+O8+Ad+xCLfyBKV2WYBa5+X7/d+gMzg5ROC:Wft4AFlsU3zAd+IYi+X7/GgHV
Checks for missing Authenticode signature.
resource |
---|
ab11c8be861772be462175deda935388_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE