DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b0a35b4546d9086c509c281d4b327965_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b0a35b4546d9086c509c281d4b327965_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0a35b4546d9086c509c281d4b327965_JaffaCakes118
Size
86KB
MD5
b0a35b4546d9086c509c281d4b327965
SHA1
f04c384b94f4556916830c722cbd0fb47747abcb
SHA256
b4576db65f1cb8069bee9e491f12bddf42657689fcfbba9ba2c372d136547f3d
SHA512
c9bac4822548be0f71199e9776da5c81730d65d8b030dc577fa86ad0fd397198ca285a05efabed3ed63a2955bf8dfa9f9457338e97fcf2064c3dfae67e023a15
SSDEEP
1536:TV9eS048tNN5AneGiGu3bMV0boEFzergbqentreTjoSpDaf3v53ZRI8ubXQAhGx:5v9eNNGJiv3AVyBzeStKTjNDS3xJ/uby
Checks for missing Authenticode signature.
resource |
---|
b0a35b4546d9086c509c281d4b327965_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE