DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f7c8f11559e209e3a515d375a558b044_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7c8f11559e209e3a515d375a558b044_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f7c8f11559e209e3a515d375a558b044_JaffaCakes118
Size
84KB
MD5
f7c8f11559e209e3a515d375a558b044
SHA1
2254f19eb4fdc63ef0a7d17774db7c70d99b6f2c
SHA256
d8b2c1bfbd895fdfd27684130cd790f4dc6fa9a85b5187fc2d7f07662a028485
SHA512
9a2e477b3263e7ed28b10c5dccc33d692dd651d96ffe274090214a1b1724b7d62915d0bb7851d3352d8b78c1870c8497b7c4a5e3191eb7ee4216ee4c720b5906
SSDEEP
1536:GX0zYL1A96tgys+sPHd0JTY/PBbA9YmEL8/T2tkJXyQd5pP8BtOEMl60JTs:62y1A96s+6eQPum9Ptk8QfZsOtlxa
Checks for missing Authenticode signature.
resource |
---|
f7c8f11559e209e3a515d375a558b044_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE