DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bd74b1a75a58be9b7bc2e317118b68a6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd74b1a75a58be9b7bc2e317118b68a6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bd74b1a75a58be9b7bc2e317118b68a6_JaffaCakes118
Size
83KB
MD5
bd74b1a75a58be9b7bc2e317118b68a6
SHA1
48c37c76fb822f4accc8ca1437573f8b599249fe
SHA256
5e767ebd22cc218bb25727c63e913213aa159524d6a6362df8f521bf5c66dd98
SHA512
05ab3754f862cfd2b36dfe0a3a9be08f161a5b4baff536afd163ae9ec6b1f512e9eb6b2f3abc8eb3720920994e2c07985905e7ebe5fe58a0a7f76431bd292f77
SSDEEP
1536:dn+7y8ROcLc+w6rhc6F4ip9dsb6UAlz58qhbK96NxKghiNR7X4hL:czIehc6F4U9dsb6U3qhO96NxnMUhL
Checks for missing Authenticode signature.
resource |
---|
bd74b1a75a58be9b7bc2e317118b68a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE