DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
32886122945f31ce735358b3b7acefaa_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32886122945f31ce735358b3b7acefaa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32886122945f31ce735358b3b7acefaa_JaffaCakes118
Size
167KB
MD5
32886122945f31ce735358b3b7acefaa
SHA1
949b7c162adabc4a7a004bf9761ef7f5086bad1d
SHA256
9c9ac4e4c5aa5ca5bf01cb0d998fb08693fb5a60774711ef20d5eeaa6ce0a122
SHA512
e4622d5bd2e38029ad7797e1ca4d131daa00e2b775654cc6c91e64ad7139d42614fc4d4715353330bc6edd1a36666ff63ee3c3c5620322b9d52c2c803d0a5b21
SSDEEP
1536:jxYIhldVv9+PttVvRMzfVXYQ5vU3ABQ0kefKh1zAsNxw1xmjOm1V+m6ZtoW6:rdVl+lS9YQ5UQBQM4QEB+mKtT6
Checks for missing Authenticode signature.
resource |
---|
32886122945f31ce735358b3b7acefaa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE