DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bb262f90c1dafd9db04d5c64a53a27a1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb262f90c1dafd9db04d5c64a53a27a1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb262f90c1dafd9db04d5c64a53a27a1_JaffaCakes118
Size
85KB
MD5
bb262f90c1dafd9db04d5c64a53a27a1
SHA1
129dbefa0264fede865865e3b6dccc466eb0d6a7
SHA256
9ae5ad27be37e3fe4b00ba50649487214ac58a49f49d888080ec7b93c13e4782
SHA512
62999b763b57bdd3f90c38b26cc1581daf5c2161baf21757d44b446f02db117a79b491be5aa9bdd667a5adbdb0c1b0d8e67e163d10482ed09c01b3050a478383
SSDEEP
1536:1JIweYPAqmzq3VfIAlMd+uUdGOTrdSviBDTLmqG9JVaV9p0d9xEYISk2/:1JoYAHzm5lI+uEteKHQq9pg9xEYNkW
Checks for missing Authenticode signature.
resource |
---|
bb262f90c1dafd9db04d5c64a53a27a1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE