DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
03fe697a01bc86e5e5797c704fa3cbbd_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
03fe697a01bc86e5e5797c704fa3cbbd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03fe697a01bc86e5e5797c704fa3cbbd_JaffaCakes118
Size
80KB
MD5
03fe697a01bc86e5e5797c704fa3cbbd
SHA1
f5877a5d437d7daa2cd6b0f001a1eef34a09d1b7
SHA256
19ad09e4b620df91dfb3913104741798ee4402a5e713a94850b9cf19033f3383
SHA512
3f395ce4989138bdc2acdb1a9f58cf46398022584c17d2a00c03bd950166b353146862a2b4e5357247553fb1fabd943c328929a9ccbf9dd3a579b990ed2c365b
SSDEEP
1536:/2IUGlM/IWDAGEPeuL7t/bU0mntINR2Hot4YH+RRhcPU0yj78L8MlZUZU:/Jlbei5/bU0mnIsHu4YeRfIU08wL74U
Checks for missing Authenticode signature.
resource |
---|
03fe697a01bc86e5e5797c704fa3cbbd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE