DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
01a08e6d0022258522521f874f84378a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01a08e6d0022258522521f874f84378a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
01a08e6d0022258522521f874f84378a_JaffaCakes118
Size
140KB
MD5
01a08e6d0022258522521f874f84378a
SHA1
e76cebe7d0e93a661a9855c4f5c23857cef320da
SHA256
a35e79daf85e18e9191825a0137c753f5a0f2aab2fb129670d09b6583a1498c3
SHA512
5a59728678aeaa4a5515a49884ace7ea0f8472d3a3cd03ec2e4d882a22edf91e161ea79ba4b96a8f5777f899baee52ed4d2f921086709d3cdcb4bfb5c9c920a7
SSDEEP
1536:utpxBdvuyAC1dA8MjpRl1ck/F1i1OVGgF57YcJOnx2bBRcJDeN7+VrefDz8:utBdvuaw1cku0gGbJOgbsD
Checks for missing Authenticode signature.
resource |
---|
01a08e6d0022258522521f874f84378a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE