DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ed561c165f22d345415f9ae5ef217050_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed561c165f22d345415f9ae5ef217050_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ed561c165f22d345415f9ae5ef217050_JaffaCakes118
Size
87KB
MD5
ed561c165f22d345415f9ae5ef217050
SHA1
045e82477a8b2ff508c4cbe8a6dd804277bf7d95
SHA256
640c39f6361e02de77e55fed87598f4604fcfe29d337be5f6694f4e4cadc579c
SHA512
416afa3a2f2e768ffd7b1d98bf4dba7b89041d7bd4f477469b38aa52052ca0766b312034826572f0ba3299ac204eb3ce2e2898e734292426e572026f36c3d505
SSDEEP
1536:Lc8l12H3P8QNIm6siMTiItptZ6AOS0SMqYWojwvK+Ail2WGz+rjw3lmm8H:dlEXNItTvAR48ojV+CCp
Checks for missing Authenticode signature.
resource |
---|
ed561c165f22d345415f9ae5ef217050_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE