DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fcafe275ed0f36ed0c9e989bebda913e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fcafe275ed0f36ed0c9e989bebda913e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fcafe275ed0f36ed0c9e989bebda913e_JaffaCakes118
Size
90KB
MD5
fcafe275ed0f36ed0c9e989bebda913e
SHA1
7b9fda57172aac87cc31b59b0e00ad741b0b5b20
SHA256
9800e0e7ff05a8ac7e75eb7178e2762178be8935457ff923d618d8c4395bd08e
SHA512
b6373c030cf25d6b178af869837f65ad7f3b8081298b0c7a3457f70f72936d50b244d9b6da4f2d7c9cf8a6d6b7b3710cb4001fd8773a3af5081bd7f481046db9
SSDEEP
1536:J9Upf7bHTqc5xkSNJqnEBQibPkWdTxupBeNohJKwDwjUvXiaweMhnP:J9UpfHHTF5xkSJJ9cWdluvIkJJxXI
Checks for missing Authenticode signature.
resource |
---|
fcafe275ed0f36ed0c9e989bebda913e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE