DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e24ccfd7376d5e82dc9b73edcfdeb826_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e24ccfd7376d5e82dc9b73edcfdeb826_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e24ccfd7376d5e82dc9b73edcfdeb826_JaffaCakes118
Size
22KB
MD5
e24ccfd7376d5e82dc9b73edcfdeb826
SHA1
23fd1bf1a940dc267f29790a4f0362ac2dedfe0c
SHA256
5d3fd6168ca896715c22dbb8cb55d6d19e472085eddcbdeb5d5a8eb3005ad475
SHA512
7f9f16430b2b2f2b254b4ca8d9a73b5afeefe7c0ef378901c14757ee5375efb1562b43dd4bdefc795e6d7ba1a46dd71f4dd3c93f922bc15c29163102f56bcb67
SSDEEP
384:zs21vtlLQripOY6P5WWgFG95G4JCo2duWLel6GYLzHUuWEIdUu35aahhzmGxSGp+:btlQripODoWGGHGFyLwz0uWPd/30YzmN
Checks for missing Authenticode signature.
resource |
---|
e24ccfd7376d5e82dc9b73edcfdeb826_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE