DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f1c823bf0e347501e3971b335b0756f9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1c823bf0e347501e3971b335b0756f9_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1c823bf0e347501e3971b335b0756f9_JaffaCakes118
Size
158KB
MD5
f1c823bf0e347501e3971b335b0756f9
SHA1
3946d2b34b618ff431df314620bf18612e59c288
SHA256
4e495185e01129c2b2cc99bc6aeff9702bfaa9e219cf416b4578c704f5f5363a
SHA512
4e1d5d2323b58321cb130aeb66c0b52de0f03097ca909462f7a93f46f720eaca1a0c731183702cc3baaeffc6e45f61b5f0c69b30c0e99b9eb2f258c79e9dc404
SSDEEP
1536:zPiLl8ir8m0cZRcNeF2C/mVaYUsfnhYuS5yifidJ3iIHNpZR:zP1kv06CQF2CO4YUsfhYn5AdJ3iU
Checks for missing Authenticode signature.
resource |
---|
f1c823bf0e347501e3971b335b0756f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE