DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d311d5ad4ce8bb858beb76074db65d79_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d311d5ad4ce8bb858beb76074db65d79_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d311d5ad4ce8bb858beb76074db65d79_JaffaCakes118
Size
87KB
MD5
d311d5ad4ce8bb858beb76074db65d79
SHA1
28e27567ef45403d41658416b4bdf87127da3e95
SHA256
619b461ba0cc0d15939014785aa0b49bcd5c65e5a160dba80bd76c4fc2c2ed39
SHA512
97f3b3a15f43e4023d35f02c4d085432c82bae4eb6858e3d6a0cf8eaa0d37651d34debdf50d0d8407b75f50048780d9a43aa163aca84fa72e09d74762059084a
SSDEEP
1536:Gm2yUnx5Y10N7hMlWij0yIMWivudYWspXOeaRExgoX80eWVyZ0Atd6u5dP/1N5iT:R2yUx5Ye7KlWK0yIxim/sRFaR2J8/Ghf
Checks for missing Authenticode signature.
resource |
---|
d311d5ad4ce8bb858beb76074db65d79_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE