DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
28df610155ea9c4e05b823f56b59838b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28df610155ea9c4e05b823f56b59838b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28df610155ea9c4e05b823f56b59838b_JaffaCakes118
Size
86KB
MD5
28df610155ea9c4e05b823f56b59838b
SHA1
d271c60e1118ebdf4e3c9a9445c2f867319c00a7
SHA256
51d6eb0a4cc37aaa4ee8fc029a1f66815b74d092feebdeb949b612dee56fbf43
SHA512
0d62fbd7e11bf2c8a7b443ed3ba5702d10001b6a72ad41ef1da1f8257584c0a89e781db0d95515d76cc773ee39fc6b1fcce230b4c1db2a451cb7cb55ddacd226
SSDEEP
1536:dv+4ZYHilPbjnQrllKDVQsz4rbaZo5lXoUn/Bn8xg5iWqU+yQimT4Qrq:dvN7PfQpYD6szUbt//B8xd9w+ThG
Checks for missing Authenticode signature.
resource |
---|
28df610155ea9c4e05b823f56b59838b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE