DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f34cec2fba4bb116491e027a1d3fa00c_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f34cec2fba4bb116491e027a1d3fa00c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f34cec2fba4bb116491e027a1d3fa00c_JaffaCakes118
Size
140KB
MD5
f34cec2fba4bb116491e027a1d3fa00c
SHA1
427b68b8bb22be1016121a361aa3b6381b0f9b97
SHA256
aa1d0d128f5dc94c9ae130cc226ca1c758372cc9fe7fe38a3f4d0ba0c484af6d
SHA512
5967d60a928b0dbe4399d116dcfc2de4cd678eb2a31e49c4889559801d5c3a7c73e09fa65cd334c7099e247249d057d5e32cba637cade145ed122df978efb1c9
SSDEEP
1536:2YowtrFwCKQMfyRXNF0PjkroQAzoXRjBg4V1y+5xzHjbMrbZa:LJrFwCEfA0bCp84fTMrta
Checks for missing Authenticode signature.
resource |
---|
f34cec2fba4bb116491e027a1d3fa00c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE