DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d9feb9eace8bec469be2a46cdaa60dfe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d9feb9eace8bec469be2a46cdaa60dfe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d9feb9eace8bec469be2a46cdaa60dfe_JaffaCakes118
Size
137KB
MD5
d9feb9eace8bec469be2a46cdaa60dfe
SHA1
5923048a5f45407e6bdc799935430e39031ec235
SHA256
e3dd1488b1fffccaf47103fb3527d89062784590dffe308cfab33cc7e5280c0c
SHA512
56e4730a183844bb84de72c3570d2b8f22dabe38a89f816836d9671eb96cf283c82935259a851c459dbb198314e85529a148b079d0b20f5b1cbcebbf9f743f29
SSDEEP
1536:moD25orqRJe3Vv+taW4irM1xDBtGQwSjDO3onUClSJVKEwRS3:mmr+tzo1VBTwcDvUCawRS
Checks for missing Authenticode signature.
resource |
---|
d9feb9eace8bec469be2a46cdaa60dfe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE