DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
aea2ea7a714406cdbca974ac5f73f718_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aea2ea7a714406cdbca974ac5f73f718_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aea2ea7a714406cdbca974ac5f73f718_JaffaCakes118
Size
88KB
MD5
aea2ea7a714406cdbca974ac5f73f718
SHA1
1781e320f7cb7735b4dae64851291c201a00beca
SHA256
685b8926cf7c3d274b4c9852c89782e9a02d3738227f0f6735750d7700ac7e60
SHA512
e39796ab680d34a552c9c1e0883524cf45901266e5fe7f7c0801b1d819f0a8b5d3ffd6ba3c00805d522f3b50825a605a5c0b1d5622c714d769307c06ca0d9ab8
SSDEEP
1536:mQbU7Z2bMd+fp7Lw75UzAfsXr9coNi4tgENIThJtxn9jqQq7GujfRf9Ip+D75UzS:fbUZl0fp7Em79Bc+yFJP9jqr7GuDRf9X
Checks for missing Authenticode signature.
resource |
---|
aea2ea7a714406cdbca974ac5f73f718_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE