DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
881bae07f7fef9dea416d909b47ba368_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
881bae07f7fef9dea416d909b47ba368_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
881bae07f7fef9dea416d909b47ba368_JaffaCakes118
Size
106KB
MD5
881bae07f7fef9dea416d909b47ba368
SHA1
c950e22011fa70e867cc756dffb1fd7fcf1d434c
SHA256
d0bd58f80170e9056dee8a01b3622832d66457a1af4a23d31bcd879abf3786ec
SHA512
46b1c7fc077867c3aae36f6c8071fe735de59e71f16a19700a9b161a2b35710e6162116257a63a1daea44a7f7ad32ebb0b48069ff478b541e6fe56cce89e795b
SSDEEP
3072:QG2yL/UST7e0n+DkW6AE+0Uq+B8pswkXZiE4uyLg:0yrUSvBWTPRV
Checks for missing Authenticode signature.
resource |
---|
881bae07f7fef9dea416d909b47ba368_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ