DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ebe6a9b6533bd876dc4ede95aa567fc0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebe6a9b6533bd876dc4ede95aa567fc0_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
ebe6a9b6533bd876dc4ede95aa567fc0_JaffaCakes118
Size
90KB
MD5
ebe6a9b6533bd876dc4ede95aa567fc0
SHA1
5bb13eed1648de0a9843a00c7f2a7c5a2f981d63
SHA256
4c3c269260dd23579a2fc1ca0626cd3497f180ba1921cdaadb4efa5216b49011
SHA512
e4f47898591bdff80814667ef300ab009898751c4d8d1c6799614b5fad1ff35ae11437ce2c8ee66b590ee186ab4510b1b2bdf25061e5719dd4d29d561eeb4e7e
SSDEEP
1536:pVgHwRiZaPEtF+B0RDImDIIbPSkQb1inYMVLe+isz2ScXDIIu:pGJTCBg380P6lMulX81
Checks for missing Authenticode signature.
resource |
---|
ebe6a9b6533bd876dc4ede95aa567fc0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE