DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b5353d295b3ad7f2cee8e208455f9183_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5353d295b3ad7f2cee8e208455f9183_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b5353d295b3ad7f2cee8e208455f9183_JaffaCakes118
Size
86KB
MD5
b5353d295b3ad7f2cee8e208455f9183
SHA1
e67b8006bc564dd4ccb1520e0dc37fa2306f58d0
SHA256
ff7ae22f3f46e8e9c6ef87d4592ba41f4f73b45b74add33aea71801567123b96
SHA512
dd04ecb1e411393ae053fdc72699a9d9ca8291b4cee974bbb0736834475d2f68b46653f5e14887be8b23998135da158eaa25e21d4c0e669fae463b413648bdce
SSDEEP
1536:PtgbvoudJnIMcDNm8TbF2Pvysz4rbaZo5lXoUn/Bn8xg5iWqUPnxFI7Dr:PIggJIHDZ2SszUbt//B8xd9gFmDr
Checks for missing Authenticode signature.
resource |
---|
b5353d295b3ad7f2cee8e208455f9183_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE