DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c120ec6073d0f8ef4be5214a176d7aad_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c120ec6073d0f8ef4be5214a176d7aad_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c120ec6073d0f8ef4be5214a176d7aad_JaffaCakes118
Size
140KB
MD5
c120ec6073d0f8ef4be5214a176d7aad
SHA1
87886668e927fa6bc69098a5f0ff272cea42b919
SHA256
e11eee2b15815f9508778b8fb5cbd7732ac80a1ae139efa1ac76c545f06c9c99
SHA512
a76357de4d64a8c0ff1da03cd6681027668237b2c76a1a691626992b5e4f9dd1327f93fdcc8409f39e549cfb58bf6b4e41fbd05a26b120eb5b12adf7882a657e
SSDEEP
1536:ZwTVgo5mjjq0FhMGcCdEVi/4MB8xkjjJg1ixBmmmkZi0kacc:2Co4fngWEVi/lkoZmmmkbc
Checks for missing Authenticode signature.
resource |
---|
c120ec6073d0f8ef4be5214a176d7aad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE