DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b404e2335b4a26761464a88619ab7f57_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b404e2335b4a26761464a88619ab7f57_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b404e2335b4a26761464a88619ab7f57_JaffaCakes118
Size
88KB
MD5
b404e2335b4a26761464a88619ab7f57
SHA1
c1705f87d708574f046ab60d949ce5dbc46c0c2b
SHA256
10c3e14acaf9d31941c3a27792cf54f36ea8b5e7a381b50ececcf1be9992cbb6
SHA512
4675e2fd0a9440dd8822b578150296aa540d1b741d57d0e836869f8e826d1d9e851918109c124ccfa2e14695983840893256ed49f50e02c8d4be7fd3fd9e7158
SSDEEP
1536:iWQr38YgAPgM8QWxClDwxNC0+qmLFX4e0gjgpBKduAHzRhbTnc5HSK7RpSFDwxa:KD8YgM8Q3yC0+RLF+cbRhbTc5HS2pUJ
Checks for missing Authenticode signature.
resource |
---|
b404e2335b4a26761464a88619ab7f57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE