DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5ffbca470c25db28e0cf289ec5f45f48_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ffbca470c25db28e0cf289ec5f45f48_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ffbca470c25db28e0cf289ec5f45f48_JaffaCakes118
Size
72KB
MD5
5ffbca470c25db28e0cf289ec5f45f48
SHA1
83684b1b01dc430cd2c33428f32b1105272cc52b
SHA256
607406bad3e667ffdb4743fb8934f85ccd74eb2e454ddbc37441bfc0c2610acb
SHA512
5f991360b201d20bb938d89d4b97d3509df95cfedf94f37b36cbd1d4942fbfd250c71dc9ae3afe88656a74b3e2e315f85aee7b6f1965a53c3e438ee290525c7f
SSDEEP
1536:odq1QAQ5QX8gfqvzOlYxpPA92XDg2JKIt3jXjx0beh54h/f:BYQX8zhPA92z8It3jXjx0beh2/f
Checks for missing Authenticode signature.
resource |
---|
5ffbca470c25db28e0cf289ec5f45f48_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ