DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e47ad976575328a290e11a0ca53d70c8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e47ad976575328a290e11a0ca53d70c8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
e47ad976575328a290e11a0ca53d70c8_JaffaCakes118
Size
21KB
MD5
e47ad976575328a290e11a0ca53d70c8
SHA1
178cd60ff716137af5831df9336d422f80d7d48f
SHA256
4715ea78450a1a62a51361942ba7895128ad6960f0f580424e9a6bfe876791d3
SHA512
f976b263a9eef668345343886ca5548df4ec7193db3f43a8aee6dd7ef690f2d7934069c78557869da28dd401a76be7d085fcaf888bd7ce7e41ea3b4fd5ffb1da
SSDEEP
384:ZJsjhFpT6pXUN7Q0GJXst06JbcFLQyE3g0M/qTBFZU2T4gaTaEB4Mh2rJ:Z6gpmmsWMiBoYqTBXd4gaTaEB4O2F
Checks for missing Authenticode signature.
resource |
---|
e47ad976575328a290e11a0ca53d70c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE