DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a04fdbfff09f3a69f8274c5f3f0dbbb4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a04fdbfff09f3a69f8274c5f3f0dbbb4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a04fdbfff09f3a69f8274c5f3f0dbbb4_JaffaCakes118
Size
140KB
MD5
a04fdbfff09f3a69f8274c5f3f0dbbb4
SHA1
7b895f017946e85f8463627e963b0e14b12c5eed
SHA256
42d80f237bad75a3ae8dd24a6a11d5763387ca1e0a75b24192c3e4513b46f76d
SHA512
d3d7916686f285318531e2903ae682418e0475ab1b0f9808efc1c5b0b94294979b69a3e63d3de6dddbf0f93b785395e26bd17ddf6cf1459c020fc39f324fc5f1
SSDEEP
1536:rIxVoQTXmWZ+Z1Ilq6M29t6r2qwnyHPZyhOT1XJVcDIGAsFp4yycKBz5:rwoQUow2aHByhClcDisFp4dBV
Checks for missing Authenticode signature.
resource |
---|
a04fdbfff09f3a69f8274c5f3f0dbbb4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE