DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f403fcdf8f12f52bf2ba7d822f10d6f9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f403fcdf8f12f52bf2ba7d822f10d6f9_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f403fcdf8f12f52bf2ba7d822f10d6f9_JaffaCakes118
Size
86KB
MD5
f403fcdf8f12f52bf2ba7d822f10d6f9
SHA1
ae0ef074bbb7dd9a1a33329820af9986cde64342
SHA256
8c6af68d770852e5dc2e9c7b9607e79eb76ad393c4755611dac8cb449ba5f6c3
SHA512
b44e8299c9cb7ae85f6be86ea29bd09be2c82b14af8ab8756d5d3fa41bb2aa72e186ec39cc3c21d16021588f5d2be8d1ecef1a5cf05da0170fdd1334d0f5b5f6
SSDEEP
1536:d8dCEaUS6bN8VoSPsNdrI4Qr5psz4rbaZo5lXoUn/Bn8xg5iWqUvw0LW8tZvXxqJ:dyCoN8Qkb3szUbt//B8xd9cW83xqz1
Checks for missing Authenticode signature.
resource |
---|
f403fcdf8f12f52bf2ba7d822f10d6f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE