DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
33536c5b199289ec8988d501fa9a1338_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33536c5b199289ec8988d501fa9a1338_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33536c5b199289ec8988d501fa9a1338_JaffaCakes118
Size
83KB
MD5
33536c5b199289ec8988d501fa9a1338
SHA1
f748ab72ccbdeadde4dc1a0fcd9a11089e8f1021
SHA256
93e4fd0a1d8266103c2d40aa31775eaba0911a5ad2b71da0ca2a49af8223757f
SHA512
ee05de54b0fc6b8e3b6ff40b9efb274330ba6a5a5f6f2fae06bdeeceb416d72169da157e6c084a91580edf58145871693c255014644b17a8d29391955206b2a3
SSDEEP
1536:rSOMRJcRXodBhCA66v0gRPF0h8k79Pl5E0HW6rA8bnX+xiSfZnfAlLgDnhXMc:GVKRWhCt6vjRPFidkS/ShXyc
Checks for missing Authenticode signature.
resource |
---|
33536c5b199289ec8988d501fa9a1338_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE