DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
edc762b15405ee7e5374c682354fc14d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edc762b15405ee7e5374c682354fc14d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
edc762b15405ee7e5374c682354fc14d_JaffaCakes118
Size
86KB
MD5
edc762b15405ee7e5374c682354fc14d
SHA1
f27e94a8c6140fb167674ab8ff15676cf3605e1f
SHA256
1bca1dff4ce64ef735d37298d30270bd91ed44c70b70037e6d2f5622af32364f
SHA512
7cdfd47cc8864a70fe8b0fabfbe21ec28cdfc41553f54d13cec6641f59b772d6ebcaee3f09a82a66b81d1d4dc99c11cda6ef968b68b795385c24867ce91659c3
SSDEEP
1536:Nags6NcJmHFTz64MRwT5xlh/HRREegtViRmsvKhQ3U0nlvzTlCLl:NRcJCF364MRwf/Rq5YfeSnlLgl
Checks for missing Authenticode signature.
resource |
---|
edc762b15405ee7e5374c682354fc14d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE