DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
af82ecac17a4b9d47cbc12604e9ec4b5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
af82ecac17a4b9d47cbc12604e9ec4b5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af82ecac17a4b9d47cbc12604e9ec4b5_JaffaCakes118
Size
158KB
MD5
af82ecac17a4b9d47cbc12604e9ec4b5
SHA1
22855b2d0dc5083cc841cf53e4b3b405fc8b8e16
SHA256
95545a9a33e060e3643ddb1a35e7ee974d0b364f98478ef32eaf6799c3b1941b
SHA512
9b927649370eb42e02749ddc0cc4039398f1aa1daa4e648e7536803372064bd0760cff9b74ebd20abee252f595d4dc10422422853f4ab674c4512a32fb435918
SSDEEP
3072:5qMY8TznEvF0wN6+t0mQrq0HlnNNAQSMFfI0Yv0w:5qMY8TzEviwN6+PYHTNJSM9jYsw
Checks for missing Authenticode signature.
resource |
---|
af82ecac17a4b9d47cbc12604e9ec4b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE