DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f1ad61529a0b75f870c3a1acbf1b7642_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f1ad61529a0b75f870c3a1acbf1b7642_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1ad61529a0b75f870c3a1acbf1b7642_JaffaCakes118
Size
92KB
MD5
f1ad61529a0b75f870c3a1acbf1b7642
SHA1
f3c0e719f1d4c64c2f70210bc2e21c33fbcd3392
SHA256
d0a836d3e90f1781a29c61f9837db6090685390e8bd64ab7905450b33982a1f5
SHA512
aed68ec6823c8e2870d35b8d8d3d74a9357f2c9a924c3298e99f926c89d6c3cf72ff35fe58778a3ed4b0f48aa844696a6c4677529497aae728cfb13754238117
SSDEEP
1536:1CLWvT6h/W2s06RgjkG+ZOBLylol7LVpgKCzMqeeLJuUfnnjkG+p:1CLySW/0KggGxy+xLV6KCzJbBfngGi
Checks for missing Authenticode signature.
resource |
---|
f1ad61529a0b75f870c3a1acbf1b7642_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE