DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b1152557ebd22357adb2539aa1ffd687_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b1152557ebd22357adb2539aa1ffd687_JaffaCakes118
Size
78KB
MD5
b1152557ebd22357adb2539aa1ffd687
SHA1
51529fd98d965e6a6b2e87cf1b152c7642c89a78
SHA256
b36d9adf1b7aa954cc0689677e3bbcbd555b6a9cd2fb6495b535c747fc859150
SHA512
340fa105774b519fc859783c4456c7a8b6b4fe11dd5ae8a496dd9f6ce33182857c3a3a28f439b831dcae4a355e8bdfa336bec06e4d994de517e1628ca524b3a9
SSDEEP
1536:piOtWdvvwNYwE3MPkAKWINbq4FiRLoe77FqGR01rVGOswlO9IoNk2ZnVtAT:RtWynE3IbKWINbqBqo+VGRwoIo1ZwT
Checks for missing Authenticode signature.
resource |
---|
b1152557ebd22357adb2539aa1ffd687_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE