DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
9408998517298500e61ad3e5c19d5233_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9408998517298500e61ad3e5c19d5233_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9408998517298500e61ad3e5c19d5233_JaffaCakes118
Size
84KB
MD5
9408998517298500e61ad3e5c19d5233
SHA1
b3103cd9fef598d557765404dcdf1f4bbb01e63a
SHA256
f38782303a37b7a6db1f4c2bbbae052b14b33717277c417aafb7260e5b6fbad1
SHA512
bbac09a128e31a7f81c98f492ad6f87829c802f9716358d50b7329a35d1006565972a6452ea3a7102159ef3d24523e0a5cae8a638c54e5863c0fb83df1bc924d
SSDEEP
1536:FkP69MR0Tze7Cwxmlr3YkgmQzOwZ0NQDQ2UhkS59iwggiKiPaivXlr3YJ:B9y0T27xwroPOwaNL1hkS56iiCivVroJ
Checks for missing Authenticode signature.
resource |
---|
9408998517298500e61ad3e5c19d5233_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE