DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e0b35557d44d98cbcdfc1b12f55ccb99_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e0b35557d44d98cbcdfc1b12f55ccb99_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
e0b35557d44d98cbcdfc1b12f55ccb99_JaffaCakes118
Size
86KB
MD5
e0b35557d44d98cbcdfc1b12f55ccb99
SHA1
120e52fcf2ad95cf3fbdb55a87f0bb017230a7db
SHA256
5864413d2389bf24122b915f36a8ed1cfe7b93ebac559eb0f25a656c2c779c0d
SHA512
277f4d2019f9f23d12b14a2e95bd488551e882ce1b15594b7b981b78e36fafc087bd5c9c1fec86cee3ce81611cadfa111123670ad07dc2c75f650ca796913113
SSDEEP
1536:8sJEiFgFsyykibl7OMdIpq/yVuEO0tq4Q3jRVEZyog5FG0uwNRpq/yU:NF2sOxMluvQ3jiyjPXRK5
Checks for missing Authenticode signature.
resource |
---|
e0b35557d44d98cbcdfc1b12f55ccb99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE