DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f48fcc03e375234ae8faca294528436f_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f48fcc03e375234ae8faca294528436f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f48fcc03e375234ae8faca294528436f_JaffaCakes118
Size
88KB
MD5
f48fcc03e375234ae8faca294528436f
SHA1
fedacca12af3d00a6134b1c365217d446d620596
SHA256
1e2406e349c4d27c88c67f4bbce5f29bb9663a5b53d231f007a94a4c6a7d8693
SHA512
6f01e9fe8edd57bf92aada380b8771cd18070c3ea6d85661e8b9bb5311dd1b7666cc16563d780cf056835a607ed3610cb8cc2d0adb920b10e92831affba610e7
SSDEEP
1536:KGAvqOlkEFEVRsYz8IV9oi5rHesxsFIZ/zogreSh+71Akv9oq:KGAvqAARsYz8IYV2vZ/zjPh+PCq
Checks for missing Authenticode signature.
resource |
---|
f48fcc03e375234ae8faca294528436f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE