DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0f8b1b79b72b535be9e2dc495eea1203_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f8b1b79b72b535be9e2dc495eea1203_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0f8b1b79b72b535be9e2dc495eea1203_JaffaCakes118
Size
89KB
MD5
0f8b1b79b72b535be9e2dc495eea1203
SHA1
ee8af4fec2b9ccb779f679f3deeb8981643f344d
SHA256
2d8071ae92ea734a60722516abe06b75da80ffa394cf7c1b6ca94b3f1d7fbb66
SHA512
858a2d6c4f6ec78e376cf788be3c852f4d5ec031e2b2c19f0987d1e6c24fb53c7cc4e044c9842c70100e56ac5028bace13c2103048890ad7cd6682ec8fb1d8f5
SSDEEP
1536:0kgNZDTQ9zPvy8uvDek1iAHExJbpXTbgjW9vq4fXF76Rn/y7dVQ+K12:NgL87vy/N1+JtXT39vq4p6Rn/aVG12
Checks for missing Authenticode signature.
resource |
---|
0f8b1b79b72b535be9e2dc495eea1203_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE