DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f30d08700db130111cc8e53cb4499acc_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f30d08700db130111cc8e53cb4499acc_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f30d08700db130111cc8e53cb4499acc_JaffaCakes118
Size
69KB
MD5
f30d08700db130111cc8e53cb4499acc
SHA1
d9104182d9e536b5e631f15fab56fbcc9e6085a8
SHA256
9e438bc3e482f98cdb7f0eeccbd7c54afc7800ce7f6923331450f11597e58e3a
SHA512
218e270dee34c99479e9deda56eaedd26e4d880c9ce6ba3442e4ab17fd69e70913b1fe3143c389dd80bf741520e9a2bf46ad103b9f8c6e8c5fb80298ec7ce36a
SSDEEP
1536:m6IOT2ujZJAFv8RE6ZRLHlUN0NNu8JuxX:m6jT2ujZJAFEeQhru8Jux
Checks for missing Authenticode signature.
resource |
---|
f30d08700db130111cc8e53cb4499acc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE