DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
05d21fba0045965254c5f8ed8e780462_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
05d21fba0045965254c5f8ed8e780462_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
05d21fba0045965254c5f8ed8e780462_JaffaCakes118
Size
82KB
MD5
05d21fba0045965254c5f8ed8e780462
SHA1
905c144d5b587bce3be463223b62fcb31d24bb37
SHA256
3117393ec8fffb94340cd20f6e9728f4a12504f212f83a4263f176bc7a3473cf
SHA512
5ab51ec8c51ba2dc35668254493a3ae531bc1f1e408ad145f92b235153bd9f315e93ad342f806612ad00fb430894f7c5b2a6faf33c67751989814776c4e2d28c
SSDEEP
1536:twNcE6w5dQRHGDcGNxAKr5tj3IXwPB0Gzor7vjjFwgLNi/rD172mEuO+ERFWtjb:twGE6w56RHIzNjr7LTzonvjjSf/rDomn
Checks for missing Authenticode signature.
resource |
---|
05d21fba0045965254c5f8ed8e780462_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE