DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c27502141688020e1752f8a943903418_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c27502141688020e1752f8a943903418_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c27502141688020e1752f8a943903418_JaffaCakes118
Size
167KB
MD5
c27502141688020e1752f8a943903418
SHA1
133cce7324e830760a4a88930cb919cc16df2bde
SHA256
348dbb93021c7cf09c75ed069739fa31995a030357912153cfef6f83d2fcb1aa
SHA512
eb9cdafc43b628c1b19e30330b145f1b215925a176e4ae8207acdeeee0906bed3b6384e30d2a5e07255f11a0aaddcf3932e17452b9a0f5c2368f5031cb66ce26
SSDEEP
1536:iwJ2U6m/oPAM3f2hsNtoUf0UtxaemJs5u6FWlcB6OFDvu9KA1lM3f:jWmwPAM+a10UtxvmSu6FsOlKKA1lM
Checks for missing Authenticode signature.
resource |
---|
c27502141688020e1752f8a943903418_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE