DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fcad2980b998572e61f9f267e1a13300_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fcad2980b998572e61f9f267e1a13300_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fcad2980b998572e61f9f267e1a13300_JaffaCakes118
Size
140KB
MD5
fcad2980b998572e61f9f267e1a13300
SHA1
c6f1c5e93514e47d0202414bcafe379c0c184221
SHA256
2428cbbac0a00a1965f12d6daaaf9c625bc5642db583b1539e8d4eed82f7ff63
SHA512
918ff1d86abfb1b65beaf7768ae3f0fa5fd6686f262feccf1dde5119e21fd51bfdf2c3ee22721a7ee741312d4139b8583b42cde35407b8d4c0695f4e04bc07dc
SSDEEP
3072:0eQq+NapdAKdsATAwVZLIyubVfZX2CJocSOkUdAK:TQqvNlTAwf6bT2r2k
Checks for missing Authenticode signature.
resource |
---|
fcad2980b998572e61f9f267e1a13300_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE