DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
feab58065ea09ba71baa590e1b2b6538_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
feab58065ea09ba71baa590e1b2b6538_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
feab58065ea09ba71baa590e1b2b6538_JaffaCakes118
Size
89KB
MD5
feab58065ea09ba71baa590e1b2b6538
SHA1
f12e191863c3a56b45b0011d04af486181e33305
SHA256
3c0439d28c09d651228f7e4398920258c105ebb563c2cdcc2bb7f4c8fa7dfbec
SHA512
9bb3c5cbcbbbbbd0f1c7075f1baedd0f8c0e6c5a8b25e3f0a1cc245b8bd7eb7eb6212739319911825b0a6aa066ca061620ff1f60727ef4bc86aab3d3740c02da
SSDEEP
1536:kQ0rhKP/439Lf1Rmzfm2fcOquNNR6g5qcfnhQvfIGzg/I7ACP9JCOxj7IdSnQe2k:kQohM49mzffcLuNNR6ggeGfIGU/2AO9l
Checks for missing Authenticode signature.
resource |
---|
feab58065ea09ba71baa590e1b2b6538_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE