DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f2bc6c6dd08805886af0b71c0954b13c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2bc6c6dd08805886af0b71c0954b13c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f2bc6c6dd08805886af0b71c0954b13c_JaffaCakes118
Size
84KB
MD5
f2bc6c6dd08805886af0b71c0954b13c
SHA1
a0880f9e0efc7b658f042fe286b5788ce3f24ec0
SHA256
20b61f4e26ca6e881321084b5901d2dde04add76b73c0f2a79c82c49158d4658
SHA512
f941ed2fc07abcde3adc02bb94741728bb0fa76be1935bd1f7a9d75bc4d69de7be3f7aeb30d178c8e76d7e0a2ec3009419ca946eb1a7756b31dcdb7703e7a28c
SSDEEP
1536:o/hcu9c6SV+3fr/R+CxXqUYtlIJP3ILRPF0h8k79Pl5E0HW6OQ6tDJn:opc+c6SQr/R+S8oPuRPFidklFn
Checks for missing Authenticode signature.
resource |
---|
f2bc6c6dd08805886af0b71c0954b13c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE