DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
02d63459b90a37066d7669dbf227487e_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02d63459b90a37066d7669dbf227487e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
02d63459b90a37066d7669dbf227487e_JaffaCakes118
Size
84KB
MD5
02d63459b90a37066d7669dbf227487e
SHA1
ab61991981cbda31496d1f481963a952f423d191
SHA256
1903e0bdcbc90828f53ac95d9605f4090fdee7bdcc8a0a169179000c518bd749
SHA512
7dde53eb6bdd60c151dbb179afaa8ca6fc112ac00cdc2dc532c710659f0923d7623a3268aa5c465014e83e15c4ebf43277a93f59689530c632da20d6c52f6823
SSDEEP
1536:UHQhtAV7PYXx3k6zLyKDjbyyeQqX+eSOFcWOhCLH6p+AdmpX87ps:U4IaRyAXe5XAOqWO8DkLmx
Checks for missing Authenticode signature.
resource |
---|
02d63459b90a37066d7669dbf227487e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE