DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fe1c5f4341d2213c74626ac428544d47_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fe1c5f4341d2213c74626ac428544d47_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fe1c5f4341d2213c74626ac428544d47_JaffaCakes118
Size
86KB
MD5
fe1c5f4341d2213c74626ac428544d47
SHA1
7238cc610f9fdd14672e7351a9e54537efaf34cf
SHA256
9de3056dff4ae43bfae743227033b80653b0f1a2e6c73d607bd01795e62516ce
SHA512
7bc0d5a3624c3be9ce17c18e747fd34a7ba589a2da6b8ce99e616db5fa5ae3afb13526948eca67402b3f083829f358dda9b769954ef45b8437940cfdfb7c4f20
SSDEEP
1536:8P5ndgvNpHU8Fc7B6fgSQ/TPR4sz4rbaZo5lXoUn/Bn8xg5iWqUlLhYvg0MLR8Sj:YlevPOAQrP2szUbt//B8xd9qLhytuRFj
Checks for missing Authenticode signature.
resource |
---|
fe1c5f4341d2213c74626ac428544d47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE