DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a495ad06eee1bd9ffc2d2b0b98970d80_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a495ad06eee1bd9ffc2d2b0b98970d80_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a495ad06eee1bd9ffc2d2b0b98970d80_JaffaCakes118
Size
59KB
MD5
a495ad06eee1bd9ffc2d2b0b98970d80
SHA1
4efddda0ea556531c66be514a1e23b98534e063a
SHA256
58ea96c50e08bc3dd62e9af0817099d0af5b1652a6c7d550c5b7e9ed179c6c33
SHA512
cb1da11b8c0a1ece1c3a0d6a7a10be2930020f7e7a4e1657b6241fbf86172f2cd47deb871fe3776622a3b97cbda5ddb09024928a201cdf16652474621dd1ff48
SSDEEP
1536:KIy3JQlKhiNICPaDUWfroXQ5nywTcUji:KIUQlKhiNxX6ynUj
Checks for missing Authenticode signature.
resource |
---|
a495ad06eee1bd9ffc2d2b0b98970d80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE