DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3fa38e27bcce355639fc61740ffdaf6a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3fa38e27bcce355639fc61740ffdaf6a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3fa38e27bcce355639fc61740ffdaf6a_JaffaCakes118
Size
140KB
MD5
3fa38e27bcce355639fc61740ffdaf6a
SHA1
ff567ac62521e960fb01de10953d398b54566a90
SHA256
b427e2de226698c675c550c6d24ddedd1f174c9ad7a21a12578a5d3bd206ade9
SHA512
7d20737694a576e9dbb66f59ed91885b293517c8b98f8261b5988de2c83a724e85c330908aaffaea0098428db1b93fe32a4832c402bde56bcd7c1b9b1e076010
SSDEEP
1536:xMSxceY0U5BoRdSAmXD508N167AmKryHHNFTUxzR+Nl6iFnCX:xMSPYX5uRD2O8eMm9HLTUxS6iFn
Checks for missing Authenticode signature.
resource |
---|
3fa38e27bcce355639fc61740ffdaf6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE