DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5f3546c485333a24f7e306f0d8c2f22b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f3546c485333a24f7e306f0d8c2f22b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5f3546c485333a24f7e306f0d8c2f22b_JaffaCakes118
Size
158KB
MD5
5f3546c485333a24f7e306f0d8c2f22b
SHA1
e2e7842f06c46752ec89009053783214e0fa5e5c
SHA256
979af667e34653716af15ca1d744bd57dc9c081f75bbd5228dfdb612aa713788
SHA512
4cb92ebd2121caaabc54d839e2e99b12ed898e1670b76e6d4bdd2c299e0b858369d5b0dcd8573382d17a2e0b2885ad3778d5b2bda23b0db6a52823c2dbbf5a36
SSDEEP
1536:H/fWxYBkMjedZzFz3x2MBJ13fDNYDc19fL7YaV55Uuz60FIn8KIBKmSTzF:H3OWeNFlTJ9Qc/fLxzPFIn+KmS/F
Checks for missing Authenticode signature.
resource |
---|
5f3546c485333a24f7e306f0d8c2f22b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE