DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b35e849cd9a04b0eb01eeff05a2db836_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b35e849cd9a04b0eb01eeff05a2db836_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b35e849cd9a04b0eb01eeff05a2db836_JaffaCakes118
Size
79KB
MD5
b35e849cd9a04b0eb01eeff05a2db836
SHA1
b3e89e5d46d9ff57bc5dc0ebeed6386aedef0534
SHA256
1b277a13a7fc5fa8922b3c1af6aecd465614574cc6a51a5dc192e76ff175d35f
SHA512
74e07ae6138db75da2497cdb6574a9266458494a53eacf48b3a778ad8cd345e382a3c3912f9fc13e4fa90aead7da9940bd20f4c73cb0d09efd418933674b503b
SSDEEP
1536:nBqCKNlMotustoHV/DLm9jkCOH2pRPF0h8k79Pl5E0HW6Eks04c3qWMBw:nwN7ku9kjH2pRPFidkE4c3Mw
Checks for missing Authenticode signature.
resource |
---|
b35e849cd9a04b0eb01eeff05a2db836_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE