DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fbd16f125ce23be8a99a916228dd426c_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fbd16f125ce23be8a99a916228dd426c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fbd16f125ce23be8a99a916228dd426c_JaffaCakes118
Size
59KB
MD5
fbd16f125ce23be8a99a916228dd426c
SHA1
15eedff87f4ba242aadd9c5bdfc0bab98ebc9d6c
SHA256
1f0f752eb4cbee2149dc7749264f6033027691afa7f345a4f5d8ac1def2419d6
SHA512
ad23a17f344167b9568898597e950c857b1fbbdb01d61511065cdf0f7a21201712bb8c32961ca100926f90b29f1103f20acc914fdddfff62c93894b50e3388e5
SSDEEP
768:/KzyDgS++GsOW3ijON9Jyh4Qm7RVSORqlTC8SkWbUZqhh4Jhfa8BM0mfljMUDTFh:/IysN+GPqFyhO1sTC/b4CiM0mtjTWS
Checks for missing Authenticode signature.
resource |
---|
fbd16f125ce23be8a99a916228dd426c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE