DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f53921a2e8a77aa94367c74ccee1bf86_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f53921a2e8a77aa94367c74ccee1bf86_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f53921a2e8a77aa94367c74ccee1bf86_JaffaCakes118
Size
167KB
MD5
f53921a2e8a77aa94367c74ccee1bf86
SHA1
5f1e82b07aa8113e8b2d06cec876bfe959368ddd
SHA256
c6eae01d4a0a35837168a73b37e4c79d995100643f74680cbdfa8fbe8efa76ad
SHA512
6126f34bb2fbb9cabf5b8fb24d9c11deea4d9de4f6db9b36745c3186e1cd171d6c48fbe045855509798fbca13003d2742c90d86a22fc115737a39faa5d4d68d1
SSDEEP
1536:kFE0ClopXfv3oMbTPyUaZPG15tp1gK5daEe1yiVGaN13oMb:ki0ClWX3oYbyUaC5tHX6Ee1BjN13oY
Checks for missing Authenticode signature.
resource |
---|
f53921a2e8a77aa94367c74ccee1bf86_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE