DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fa9de8e70e7dd49b58c840bfa8a8358e_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fa9de8e70e7dd49b58c840bfa8a8358e_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fa9de8e70e7dd49b58c840bfa8a8358e_JaffaCakes118
Size
59KB
MD5
fa9de8e70e7dd49b58c840bfa8a8358e
SHA1
fa868e03738c305f9b61dce8fc0d86ab5f870531
SHA256
9754a5032e20bb8bbabdee6a3a8a78f1b55bfd9a1953774239dff20a6d78d460
SHA512
866660749f22e1d8b4d34ca79450aed045db93d1c98db469b5c5c16150c5d18dd77930669ed819506b102061ae5acc1cee02d3f8e576d68ae9d972dd67492639
SSDEEP
768:LKzyJc6w/wJKx3AMjN45l7HLFQ21MeosKFknRTVKBwjOXBy91lurn88hPQ/qPHBa:LIyKn/wAx3Ob7N6eop+MTByWkqDUJd
Checks for missing Authenticode signature.
resource |
---|
fa9de8e70e7dd49b58c840bfa8a8358e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE