DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f1d550b92f29bef89ffa30b0bddfaa63_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1d550b92f29bef89ffa30b0bddfaa63_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1d550b92f29bef89ffa30b0bddfaa63_JaffaCakes118
Size
140KB
MD5
f1d550b92f29bef89ffa30b0bddfaa63
SHA1
0218388285196cbab55d9d269296cb410efc5140
SHA256
3acea087fcdc302f947e6a1d0b79a09fa57824a14c2793643b61f10130acdeb4
SHA512
144f57108f383ff4116d90e65ce6dea9063c80d515c1af7107d0e73691ec082b65ded133d852a1fb26cf90a49f525fa2b9c325b6a5e59cf7f63bdc78496d2b85
SSDEEP
1536:kQUXEbmcwV9ElJqTbU0RXwCtSRPF0h8k79Pl5E0HW6jGe+xv:kQwmmcy9gJqLRtSRPFidkik
Checks for missing Authenticode signature.
resource |
---|
f1d550b92f29bef89ffa30b0bddfaa63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE