DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b12fe95505df3fef8b8431604431940a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b12fe95505df3fef8b8431604431940a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b12fe95505df3fef8b8431604431940a_JaffaCakes118
Size
88KB
MD5
b12fe95505df3fef8b8431604431940a
SHA1
3f949ecf219720f402c6f947577cc5860e182339
SHA256
58100bf8e67ff5321b7108fc460851d1e229482cb0a391d1dc4885b5b4a7b959
SHA512
58ba6e2519ee30deb0f615ae922f2404907e104d115ffe50547200d86f536688020a93d715159970787d6ea0948eb0022e531db2f758b60576bcea1b50d2ffaf
SSDEEP
1536:PWvURWIKP+9Jl4ujkE8Hc1Ytysz4rbaZo5lXoUn/Bn8xg5iWqUh/LQp/21Ytk:PWvUWWdjd1szUbt//B8xd96EpOB
Checks for missing Authenticode signature.
resource |
---|
b12fe95505df3fef8b8431604431940a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE