DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c931dcb4644c238fcb57525cf5b4bfe9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c931dcb4644c238fcb57525cf5b4bfe9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c931dcb4644c238fcb57525cf5b4bfe9_JaffaCakes118
Size
59KB
MD5
c931dcb4644c238fcb57525cf5b4bfe9
SHA1
c89c5183873859c33704fc91263fca6c4a47736a
SHA256
b06757778da4b8241da5cbe7e9367bb61153a802b2878e3da1585131e2feda68
SHA512
a42914a8dd75cddcf209ebd518616a3ce8092eaf3147f43002b35476cd012219f3117fbd8aaee9dd3f0760aa14f345534c5bb8fdb72ed4e74eaecb0b9ececaa1
SSDEEP
768:lKzygAAK27rRHS55bY8HNNNuvNJvKB2neOhf33Ur23N1X7alm1L+uYK:lIyRAKarNSdNEbVhkrEXXWlS5
Checks for missing Authenticode signature.
resource |
---|
c931dcb4644c238fcb57525cf5b4bfe9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE