DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
01d6edf3b7a7ae8abf78916fcd0b3df6_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01d6edf3b7a7ae8abf78916fcd0b3df6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
01d6edf3b7a7ae8abf78916fcd0b3df6_JaffaCakes118
Size
80KB
MD5
01d6edf3b7a7ae8abf78916fcd0b3df6
SHA1
ae00ddd5e7df52db5282bf40345a5834298d650e
SHA256
164fa40e932e992ba9ee5173c65a6750469e9a1b8c10e46f3db6a28d367c0ae3
SHA512
8eb9e9fa952f74d93db3e76e9d2e8205aae5b1e0f279ceaca3db1c9fb5b8ce4800f333237e22ee16c4ecdf0aaf5d51e1e6de0a5e56f8683f61d78ad1404160dd
SSDEEP
1536:eFtQeQAS1umRKDxKgGfO5vq0m4aUgv7xzd+DDNBVEz/GEmTWWQeho5t:eFFQAxmRwKgGfstaUgzr+VBSDGhgehoH
Checks for missing Authenticode signature.
resource |
---|
01d6edf3b7a7ae8abf78916fcd0b3df6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE