DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fcd24c1f832ef3d8a873cb082552ac30_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fcd24c1f832ef3d8a873cb082552ac30_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fcd24c1f832ef3d8a873cb082552ac30_JaffaCakes118
Size
85KB
MD5
fcd24c1f832ef3d8a873cb082552ac30
SHA1
860d41765a921b433575758edf5246bedc0f90d4
SHA256
5413b275ff19975dd95d96b121d2bdb7ae9b2a81f3fca352205df307920f8f3c
SHA512
e434703c51858dd184ed5b46bfd0a82e73024318f876599c8a2895a3e6599392c1ea0effbaa19da01917ab153e9251b7c8363ba93096e9b1697e5660ebaf2cf8
SSDEEP
1536:IN9lDcl+EcM6+pvWoxjaN8vKjEx4DJUwyGqKiLkGGR+GKWcG+yFqr9ufCJrjMqfT:IN9Jcl+EcMOUDxcW++GKRrhuEp1
Checks for missing Authenticode signature.
resource |
---|
fcd24c1f832ef3d8a873cb082552ac30_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE