DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e2b3ffbfd8b23ffd65ce7a14f7c6120e_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e2b3ffbfd8b23ffd65ce7a14f7c6120e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e2b3ffbfd8b23ffd65ce7a14f7c6120e_JaffaCakes118
Size
90KB
MD5
e2b3ffbfd8b23ffd65ce7a14f7c6120e
SHA1
436f048fc1b0ff10e7f885a93d1ced69181e00e4
SHA256
6c96eca40a3c6c8c1efa380807c763b9b4a3fed45f588b394959c73d554441d4
SHA512
796b290048e2cd8106fa83c2e4315ee8c90115724b2cdc10101810724ecd967a733d7531e46e5c559c8f8b1c2b591efe5fb75ed2c6dd62cde7f916f497e53c88
SSDEEP
1536:3RiKihJz+M4FQ4IOB/nNm8DUAp1uldHLF0XpDQyT9ibXoiWYybNmA:DemaKNFUzJ0ZDQu2XoiQbNL
Checks for missing Authenticode signature.
resource |
---|
e2b3ffbfd8b23ffd65ce7a14f7c6120e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE