DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
9fe2d275da87388008977bd768f4d51d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9fe2d275da87388008977bd768f4d51d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9fe2d275da87388008977bd768f4d51d_JaffaCakes118
Size
88KB
MD5
9fe2d275da87388008977bd768f4d51d
SHA1
44558d219a00fba4f855892f7e3fbccfb106b6a2
SHA256
ac998d5c1e0b34a382bcff40889d31f44700d0847c8f9686d0b99ee6b7caacc0
SHA512
a02d0ca1fa210eab243d6065962e855178cc63bafc3b2c39259be273d0e260d41503509a38f548a64de75299619bd30ec835966bbb66dec5ad7ef63ff058683d
SSDEEP
1536:1QB3rVmlsyjrBPP4XEnJwRL4rhsz4rbaZo5lXoUn/Bn8xg5iWqUAhyqbZ0lZ5ESX:wBfYr9wXECENszUbt//B8xd94uelZB5p
Checks for missing Authenticode signature.
resource |
---|
9fe2d275da87388008977bd768f4d51d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE