DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b0ad09fdaf66ae2ed935962041bd0c5a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b0ad09fdaf66ae2ed935962041bd0c5a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0ad09fdaf66ae2ed935962041bd0c5a_JaffaCakes118
Size
86KB
MD5
b0ad09fdaf66ae2ed935962041bd0c5a
SHA1
14d1aa10025c666b43ef19408b47652fdcf7b98d
SHA256
11d60fe40083cebe7324ec78b8655b8c28836852f965e6ac5f585c206503d11c
SHA512
fbe40e88da2f1204ae40ce364521795a2207db4f4ebb5309633cfef998dd763417ce3fdd070dc9c1dbdb6dbc8e1ff8f18b67addecfdef1a9e8f7c2fc13b07071
SSDEEP
1536:+thlrntRPwqKQMpMKg/Ez1vYsz4rbaZo5lXoUn/Bn8xg5iWqU3y3qjm05bSpvLP:UhlrnJK5ZgG1vYszUbt//B8xd9F3qjXu
Checks for missing Authenticode signature.
resource |
---|
b0ad09fdaf66ae2ed935962041bd0c5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE