DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fbc97099b2485ae41ad167610b629590_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbc97099b2485ae41ad167610b629590_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fbc97099b2485ae41ad167610b629590_JaffaCakes118
Size
82KB
MD5
fbc97099b2485ae41ad167610b629590
SHA1
53b8db4fa4a9e8651ae1cbdd31e1b4432640c911
SHA256
943d5c75fe55386b2a5a9f0cc65d0e98ee20939972635e8f9ad36b77a75166b1
SHA512
285e352a45d60381667132d9c4b1c3407db9c38b25cb29deba0c85d9476d3fa705768e6d971138701b2c404c0fe42d74814e368f4c6ae139ea289c18e974194e
SSDEEP
1536:PloB3astqFNQlUlk32oW9toRPF0h8k79Pl5E0HW6ybK+IdCRdlS2:PyBKst8vCWcRPFidkXRdlR
Checks for missing Authenticode signature.
resource |
---|
fbc97099b2485ae41ad167610b629590_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE