DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5df9445369541df87b94822c9f773696_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5df9445369541df87b94822c9f773696_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5df9445369541df87b94822c9f773696_JaffaCakes118
Size
86KB
MD5
5df9445369541df87b94822c9f773696
SHA1
87b8b99ab7ab3644713cbe0c22b3c5c29a8c4fdd
SHA256
11cfd998f99ad862213b0745c0fcfb15ea2d9e8f2d11385cd2250ae7481d63ad
SHA512
93640f4bac57e842892688006939f500b7205f75b0185d3c9943e03d00bf1cd4c7779b7cbe286caafaee82e8ece52b3dc95d90ee4dfd7623ef0a7f21f4e5793b
SSDEEP
1536:PkQ6uN+f3AzBlof3UfGHavqddMPCUTRDkRHM3K/FIQKLBXHuDCeYBGY:M6sf3A7U3UfGHav0dTqtsdKLNeyGY
Checks for missing Authenticode signature.
resource |
---|
5df9445369541df87b94822c9f773696_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE