DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b1838ebe3e77af642f2ac7b1fe32e466_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1838ebe3e77af642f2ac7b1fe32e466_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b1838ebe3e77af642f2ac7b1fe32e466_JaffaCakes118
Size
86KB
MD5
b1838ebe3e77af642f2ac7b1fe32e466
SHA1
7fe638d8ce0054677818b37fe884d7a3685542b7
SHA256
81de13b1271636c9e5ac763784f5c0e01697073ba9e63905f3d2bd0a212cfbd0
SHA512
bc2dd7b1aa40bf9c679993dde2ebc6bf78b63c8c863631b58d47fa3a1941710251380c2e6f7f3fb35c178b39dcf4d0833c231fb22284a51029563c8ba9051fe8
SSDEEP
1536:jncXK8bMo0D1NOK4e4Oo4LYLCkRPF0h8k79Pl5E0HW6OQ6t04Oo4LYT:TgRbMGeRRkRPFidkl0RW
Checks for missing Authenticode signature.
resource |
---|
b1838ebe3e77af642f2ac7b1fe32e466_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE