DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fa436c34b61eb503bfe68315d972838d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa436c34b61eb503bfe68315d972838d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fa436c34b61eb503bfe68315d972838d_JaffaCakes118
Size
86KB
MD5
fa436c34b61eb503bfe68315d972838d
SHA1
521f5af75f218b19bfb0ce0063d54841336d3339
SHA256
56519ce1b1e5f07140b820f51572a6b3194e21d0dcab04ac726df6992f4589be
SHA512
e8f5dad48531ecc1f8d63017cd29339a34d4b5afedcc03b4b090c9c6448f4be8b53bbdb135cc609506ad62d532a4fce0480ecec90894512f1f407067b0ffbe54
SSDEEP
1536:cdJl2ErwEClBt0V+3nwymQi6YHxFhgAqz1SBUpl3qXSlG6CI/0tc5:cdn2uwEkL8+35mSYLh3qz1SBm6/jrtc5
Checks for missing Authenticode signature.
resource |
---|
fa436c34b61eb503bfe68315d972838d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE