DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b298e7d9a7a0303426b701d73b65cb31_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b298e7d9a7a0303426b701d73b65cb31_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b298e7d9a7a0303426b701d73b65cb31_JaffaCakes118
Size
158KB
MD5
b298e7d9a7a0303426b701d73b65cb31
SHA1
ef18b7f192e29ca8d2438c0bf75a545ed9418aa7
SHA256
016f7dce198fde9d25348df23953484d828619716e1a7da4296f447175c4fc43
SHA512
f4a35bf70b86ec5a680d361b82f1c921ed1036ceae0bc5ffd776d9586756dafc97db08d8b96b9f101e76c0944ed20ea9fa78c4a51efd7b440e181ee521fbaf44
SSDEEP
3072:ZeeeMrxNUIkrlz+ISURBF9/ec5j3LUiLKxe:u6NUIkrMISUR/LK
Checks for missing Authenticode signature.
resource |
---|
b298e7d9a7a0303426b701d73b65cb31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE