DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f1fb6b620ac3648496aef31ee789011f_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f1fb6b620ac3648496aef31ee789011f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1fb6b620ac3648496aef31ee789011f_JaffaCakes118
Size
85KB
MD5
f1fb6b620ac3648496aef31ee789011f
SHA1
f2072a754b11df3c4b7b4884c2607a073ea02c2a
SHA256
c30dc9a280e030958af0c5378f09c29a9f73da851a7333e9cbe3290672e01403
SHA512
74ca38598fea0ed2e6937ebf88841def01549e319f854257187c9994b378e319137f88a67ca1e5ce5a7da5ccf6c85fc693c31391674db70ec246b65385380b9d
SSDEEP
1536:II7YqL+c3xkErfwMx5yLtvlgtaV7Cxk4AOLiMchsM16XYY0AVRHIrfl:57YqL+c3DrMLtdgtaVuxkoPchsM1uf5g
Checks for missing Authenticode signature.
resource |
---|
f1fb6b620ac3648496aef31ee789011f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE