DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5ad00ea2890bea6aa61742440f42c1fc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ad00ea2890bea6aa61742440f42c1fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ad00ea2890bea6aa61742440f42c1fc_JaffaCakes118
Size
89KB
MD5
5ad00ea2890bea6aa61742440f42c1fc
SHA1
bb9a2e867d2d30c561bb5e61ed1a86c8d96b6430
SHA256
59d346e200feab8510d85a881aa6f8f95531e3bbea9df563fd09b684a1ba51ac
SHA512
4a190aaca8ac4b3a28bce9902ec7f6be3176bde1c2c57cfd12a1cc7cb97f14d317b99103b4a410815864d33985f32fb5bbfe9113a4bbfba8ef0e2fa0f6827924
SSDEEP
1536:/dsuu4vfEyZQgo2EWkVLnoHvpXYIvO1Fe7L1R3jxg6kGQ6qHamK6dlQgr:VsudM2vk1nEc10NR3jxgeQBamP
Checks for missing Authenticode signature.
resource |
---|
5ad00ea2890bea6aa61742440f42c1fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE