DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f652eb671719cddde50222e515972c27_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f652eb671719cddde50222e515972c27_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
f652eb671719cddde50222e515972c27_JaffaCakes118
Size
82KB
MD5
f652eb671719cddde50222e515972c27
SHA1
f7ea730293f0637e15b3dac2fb09518faa41d7dc
SHA256
2ad224f7b4a56c9ad2f6e27d1f04f3495e1d111c951c1d49289e36ad57157f0d
SHA512
d2966c4129ea9f114c8bbdeadb7831d2488e80a866be7ef8f9c3cd79db583c63daec4f9d24a15adf953b6334e82c20d463c3ce6a51804c1fd76a300a12aedc99
SSDEEP
1536:dAKya4Qdfu41r1CCXDb5ZG80j9VZ1bRPF0h8k79Pl5E0HW6Y4swN/UWzqG8h:uL9QVu4jBXJYJ9VLbRPFidkD4qwQ
Checks for missing Authenticode signature.
resource |
---|
f652eb671719cddde50222e515972c27_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE