DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b47012640a58bfe3f7c8a1c11882d823_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b47012640a58bfe3f7c8a1c11882d823_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b47012640a58bfe3f7c8a1c11882d823_JaffaCakes118
Size
82KB
MD5
b47012640a58bfe3f7c8a1c11882d823
SHA1
45c612e5d0d6690dd15f5a872ac6411d66728d77
SHA256
d80cb5c3a9927c79c2f00b9a15e3c1fb495578ced1ce7bbe538193d7455b3d28
SHA512
ada2d6536c457058ab1f4db62d702b36ff3a74ef2e474dddd5b412553daa05e9cbb84087269af0ad951b00a53ad376e2b1c07477042d4b9f1056675bfe6731b9
SSDEEP
1536:Zm7y3ZFHu3HFaCg76EywNa6ozjSGnGe6JNzmMjZUtLkv39plPjA:0oFHu3A7ySV+jlp6XdZwkFpVjA
Checks for missing Authenticode signature.
resource |
---|
b47012640a58bfe3f7c8a1c11882d823_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE