DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ec845bbc39eb8ab05e7bbd4f2233d90e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec845bbc39eb8ab05e7bbd4f2233d90e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ec845bbc39eb8ab05e7bbd4f2233d90e_JaffaCakes118
Size
86KB
MD5
ec845bbc39eb8ab05e7bbd4f2233d90e
SHA1
a3d62839373cc06edf376a5ce695e2303ac24a05
SHA256
d047c71df548a4a464a0c8078708c78ca374ffe4d68c4bdb8a72a2f0ef814221
SHA512
3b2969655bc4fd20548382e621552cd512475c044b06d8a0f0f44897a3218491c1bed22942dea3718af926c3d1db31774016efefa5179312bd290e6a2f24fdab
SSDEEP
1536:3JYS7uSiokGbzSIa8Er3nKbPFZI3PDsz4rbaZo5lXoUn/Bn8xg5iWqUPmNDQhRR+:3J9AocIalnAPFsszUbt//B8xd9xqEjbx
Checks for missing Authenticode signature.
resource |
---|
ec845bbc39eb8ab05e7bbd4f2233d90e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE