DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ebf54069c6fa016f738c644edc5d572b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ebf54069c6fa016f738c644edc5d572b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebf54069c6fa016f738c644edc5d572b_JaffaCakes118
Size
88KB
MD5
ebf54069c6fa016f738c644edc5d572b
SHA1
a9c48e7ac38395521655a7fb8e533cddcf6875cb
SHA256
36378b963f237a994b0d675553adbaa6c97a19ae4d87b57ddf0e4969efe1da5c
SHA512
749e545621bd1b6914c432aafb9a4b7038c477e610385c31ae2d69a0d5dc4dffebcd5b30e98fc8d874d135aef0843b630c0ff1c015100268b2963c8851cf2d67
SSDEEP
1536:u9AnD5xvevTGmHMYhbYxmvLRCGWzrrptWcuEVWfgnN1WpDZ+20qNTLN:uqnD5xQGmHMD4C5rr7CSNMxf0qNTh
Checks for missing Authenticode signature.
resource |
---|
ebf54069c6fa016f738c644edc5d572b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE