DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f59be96b442ad1b1ea5cdf0b90a05a7c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f59be96b442ad1b1ea5cdf0b90a05a7c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f59be96b442ad1b1ea5cdf0b90a05a7c_JaffaCakes118
Size
167KB
MD5
f59be96b442ad1b1ea5cdf0b90a05a7c
SHA1
8f1731234c8d532750afff7af93e8d3213fb45b8
SHA256
7a9af4a4e2bef6755d41e04b863d2e39bc3663ded10a65fa7e8eaaa795877899
SHA512
390fa03357071a32037797f1e4aa8d8b2bf90bab49669f4aab19f2af55f47be066e8c90abc2f24cc1e75709531ca3a4bf0be73c2fe5215de057ea190ae93a624
SSDEEP
1536:zNt2T3gtECfpno2NHGRarcJwh+BfzvlQQjX4txBIads4LB:htw4pxHRh+dRQSoxSqs49
Checks for missing Authenticode signature.
resource |
---|
f59be96b442ad1b1ea5cdf0b90a05a7c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE