DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bc83c89e28d5455b1558d638cba984fe_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc83c89e28d5455b1558d638cba984fe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bc83c89e28d5455b1558d638cba984fe_JaffaCakes118
Size
89KB
MD5
bc83c89e28d5455b1558d638cba984fe
SHA1
1f2f06babce68cfe626e0e6fe6f0c0a73b16786b
SHA256
6cdc685bdd57f2906c7f27eb6c333cbb3589e6f87afb9dc3457b881aa10dc51e
SHA512
23f181451ace114c3b25e808d3daf20e5e471f38488e12119dd6fb4313207409a454551239031c524747fd958961f1ad9041ed1f575492b11518839279147a3d
SSDEEP
1536:JFrrEZGPcVMWpzGieSbn21thvE5YCJsIyswoHJUHscyXVO3BysYsfLnTw4cz57:JF/EZp6iLnGU5B1FRUs83BysYsT/657
Checks for missing Authenticode signature.
resource |
---|
bc83c89e28d5455b1558d638cba984fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE