DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a81d9ceb156f83a5f518f5b435887b4f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a81d9ceb156f83a5f518f5b435887b4f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a81d9ceb156f83a5f518f5b435887b4f_JaffaCakes118
Size
85KB
MD5
a81d9ceb156f83a5f518f5b435887b4f
SHA1
8040b7372d73be17f44208bd471aa58db252c871
SHA256
d0c32ac82dd3ba963eba9b29d5e8ecce2c3876c2532f9f97af102f8e93a81767
SHA512
6544fbc2fe1884a85174d27acb18a905e879abe608f900c232e655da4ca47ef32bcc01effa3b53fb751458f39c4b3498bdf89d679259b07c5dd9558682c5a09d
SSDEEP
1536:E/KyktQxUwsChbof5KlBCf98x3lxDVUl1DXsnsmcb2PL/z/8Qv:sk/wsCRaH98RClhXdmcb2Prn
Checks for missing Authenticode signature.
resource |
---|
a81d9ceb156f83a5f518f5b435887b4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE