DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4154a4e319f69b34101eaa4254ae3912_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4154a4e319f69b34101eaa4254ae3912_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4154a4e319f69b34101eaa4254ae3912_JaffaCakes118
Size
83KB
MD5
4154a4e319f69b34101eaa4254ae3912
SHA1
4ca68b5413e41e29350fe7548da9a8dd172da34c
SHA256
c273fea57788fb699b3d57688cbdb0aa5f3bbb1f8a567b4d615f6ded14646d5a
SHA512
5659c44126a71da340236bfc16fcf9770a2780f39e5326ffa64d4df05456728eca8526cec05bcec07e1da9a361fb24cd6593d3b1aa139f50e84691e518011e85
SSDEEP
1536:/1eLwi/Mp2ZUJm8NO+5uAWSxH2MKvF2y1mgOBvXios+AJ6cHY5ryZe6ibPxNlc:IcoC2fG5u/Sd81+xXiRJtmmZ4Pxw
Checks for missing Authenticode signature.
resource |
---|
4154a4e319f69b34101eaa4254ae3912_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE