DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a55912722cd2d7cf707ffa3f9f25c845_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a55912722cd2d7cf707ffa3f9f25c845_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a55912722cd2d7cf707ffa3f9f25c845_JaffaCakes118
Size
140KB
MD5
a55912722cd2d7cf707ffa3f9f25c845
SHA1
53d83213a06b477350cf99593d622032b6a53bec
SHA256
b80a08912c30d1ab0d9671037af77f5c07fd2df27580c9d98f2a2e66e9bd2953
SHA512
9670c694cbe8ddad2d75329794ec5af022049a8b51fbfbbdb69efe62b26b295cd02772ca7432b0998458810e45d7e373c0102dc2597da8f964c99766d28a9e5a
SSDEEP
3072:1f+GJWXfvMy2joc6lGUeyX875phPHG2j:1fTJAsyE6cyX8UE
Checks for missing Authenticode signature.
resource |
---|
a55912722cd2d7cf707ffa3f9f25c845_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE