DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0351e61047b02ccd5cce4eeb081c4938_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0351e61047b02ccd5cce4eeb081c4938_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0351e61047b02ccd5cce4eeb081c4938_JaffaCakes118
Size
167KB
MD5
0351e61047b02ccd5cce4eeb081c4938
SHA1
c0e63f08dcac1dd84734cfd2242d0cc91fb34709
SHA256
316dc961e9cf11ba09b76fef3eab32430a40884bb2a2de34fb85f1fe1d8c3372
SHA512
bff7c097335bbaa6504aa9953990445df49bf54d2c931cd93f848fe10d6350c19b92965755d37fb41136a73669e47d2723d29dfcea2cef2d79a477f4d12cfbe3
SSDEEP
1536:kjhqOVDvjvGdHjwHdi8ZdkDwZ5HzzmXrLca3CcQ9E9vqGAib:kjNpiHjgdr7kD+tXmbQaScewiG
Checks for missing Authenticode signature.
resource |
---|
0351e61047b02ccd5cce4eeb081c4938_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE