DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d2d3a6f95a60960d96a06e9e6bebdf53_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2d3a6f95a60960d96a06e9e6bebdf53_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d2d3a6f95a60960d96a06e9e6bebdf53_JaffaCakes118
Size
59KB
MD5
d2d3a6f95a60960d96a06e9e6bebdf53
SHA1
2f2107d0edefb7bbdd6b6b0a6989387738193f76
SHA256
ca67e75ccb767614ea4cddfee0e5c7610e567065a5cddb142552070279891734
SHA512
9ae51438bb6ed37c0e9847d44221b3f85dee1e3b48ad5c96bbb1bf5a443f0589ed4e3b9884118f1381f6073b81cea168d8002ff8ef4161a864e4ec588f6d93c3
SSDEEP
1536:uIyZBL03YVng5M7xVTE0LDfTRB2byE+Dzc:uIA06JQ0LRUeE0
Checks for missing Authenticode signature.
resource |
---|
d2d3a6f95a60960d96a06e9e6bebdf53_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE