DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
04ee895a74b038e693998bb87e154508_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04ee895a74b038e693998bb87e154508_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
04ee895a74b038e693998bb87e154508_JaffaCakes118
Size
90KB
MD5
04ee895a74b038e693998bb87e154508
SHA1
2d27a979a08cdb5862abce18dae197651992d6ba
SHA256
c130e6d5c8698e7390a2288a296881fbebf9458cca4f4629171f1d50afc64ef8
SHA512
4bf2f0413bed51c5a5a1634825e134e1b8971ed901da174119fd27fce67633e70290b1ed9520dc788d0632e15c98017086b18dbce9c26ee9c527b6bcc86318c7
SSDEEP
1536:YaOWqfXFStlTV9fp7YxzwSkaT8ynDPa6Npf5zQFsyscNM/11StqtmPxI0/GuhjSE:YaOWAFSfV9fRwtrDPVpUA1StLG0/jcE
Checks for missing Authenticode signature.
resource |
---|
04ee895a74b038e693998bb87e154508_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE