DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f19e84f174bc52f6c4ac0d1f6cc60ed8_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f19e84f174bc52f6c4ac0d1f6cc60ed8_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f19e84f174bc52f6c4ac0d1f6cc60ed8_JaffaCakes118
Size
140KB
MD5
f19e84f174bc52f6c4ac0d1f6cc60ed8
SHA1
b25c61a54aca4ea7969692cbfc0ec595f13e5b55
SHA256
9616039c6d56178474ec3af2c997ca4c49b8032284af2c99ca7ca8060b3b7673
SHA512
734983fa0d1b7e12eeebfa7b310115548241d35ccc3c9448873fa75b0212d10ca23f67bda32658a3dc902f0f987b25db5c9b95279a7f2681e4563f8bb360e9be
SSDEEP
1536:s6NGhlAfiwZ2Zhtkv6RYewFY22jP3STEXPOoNh9Mesm2cWt5tew:qeaY2ZhpwOnNNbPt2iw
Checks for missing Authenticode signature.
resource |
---|
f19e84f174bc52f6c4ac0d1f6cc60ed8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE