DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e938f96e0ee429718e907a8575913297_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e938f96e0ee429718e907a8575913297_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e938f96e0ee429718e907a8575913297_JaffaCakes118
Size
90KB
MD5
e938f96e0ee429718e907a8575913297
SHA1
ba05572460b40a50cb57ca2e984dba0a571d10f4
SHA256
e8bdd76a7fb47c9436a0bdf684088aeb3f3850653ed82b2bfba8a3aae2492f9e
SHA512
96e5e6a65c92a9e539f9552f7e8595d9d0e974dffa5768eb014c18e870ae2dd52d9a615c9177bb65335f9d1f16fd47ba0c365e1f7ab236bdc2e0a6901375912f
SSDEEP
1536:wpBuRokex9nA36c9zCBw+n/GVpYPxdvulBQATgTlbwj0bZP9d:sBuuk0pqG/GV0vulB1Ti11
Checks for missing Authenticode signature.
resource |
---|
e938f96e0ee429718e907a8575913297_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE