DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b8a7bbf3af6dfecc960a9d6ee218720c_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b8a7bbf3af6dfecc960a9d6ee218720c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b8a7bbf3af6dfecc960a9d6ee218720c_JaffaCakes118
Size
59KB
MD5
b8a7bbf3af6dfecc960a9d6ee218720c
SHA1
d00a46283fa619680109d75105704344e1774549
SHA256
a0bb2b1287600099ceb7c5445fe6d16154d094f2d2398d7162dd905395e5d05f
SHA512
a3c4c7522ae8ca923c611debf61576d01b08d6829f083748577e0133860904b5dcc06f57a75ea215b368e21c24b42d172212f99f6c76ac026f87832431b3a05e
SSDEEP
1536:LIyLr+y3ePu90+h7JJcwFKLVYGDnZ7XKLu7q3:LIE+u90yFJb+laLAm
Checks for missing Authenticode signature.
resource |
---|
b8a7bbf3af6dfecc960a9d6ee218720c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE