DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d0b8ea1bda461198d7eaad7ab6f9e8e9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0b8ea1bda461198d7eaad7ab6f9e8e9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d0b8ea1bda461198d7eaad7ab6f9e8e9_JaffaCakes118
Size
172KB
MD5
d0b8ea1bda461198d7eaad7ab6f9e8e9
SHA1
06f7eeb725d4bc6415e96ec4d6081f5f3f80bc29
SHA256
dc746ab40800ee892b7bd69abe65621e2049b6b1aeefebc7574969e8617b7be3
SHA512
cf0a19a1feffbdb04c542c609241640242c506082a49d76209e04774de9f532ce0155834b127dd75323f1acd9efa527fd0a0d7d3837cbf18b16e1c4a4fca1b03
SSDEEP
3072:O48wPBv7U2Y6r7AtyjMUcveB12DKwJNLZmwHPavZ3/4JXnZkoaw/y+:J8sv7UdQHoQsfmwi/4tZZaw
Checks for missing Authenticode signature.
resource |
---|
d0b8ea1bda461198d7eaad7ab6f9e8e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ