DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
dab9df4c35e88c055f6b0c930cdb573d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dab9df4c35e88c055f6b0c930cdb573d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dab9df4c35e88c055f6b0c930cdb573d_JaffaCakes118
Size
158KB
MD5
dab9df4c35e88c055f6b0c930cdb573d
SHA1
31dcb4c3054faa26b0bd4f7043e4603622717a71
SHA256
1ed30e7800cf17f35f5b66510adc1dc2b516f1ba4e1e6dd125ee8cf1ee3f073b
SHA512
058446ed37288d65ccb93f2c8b5d4b45fbbec839f0e22c2163260eaa877f74e67224bf09347e579e399b5780b3a4b3c855cf751004016b1839b5c06e04e26ba7
SSDEEP
3072:yggqI3XzS99ti7cNJrww/E3sOLMzLRAldao:pgFzSXti78Jrww/E3sS6il5
Checks for missing Authenticode signature.
resource |
---|
dab9df4c35e88c055f6b0c930cdb573d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE