DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c2299a93cb1a371404dfbdae5b0fd2e0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c2299a93cb1a371404dfbdae5b0fd2e0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c2299a93cb1a371404dfbdae5b0fd2e0_JaffaCakes118
Size
86KB
MD5
c2299a93cb1a371404dfbdae5b0fd2e0
SHA1
7d555ca137193c475ba9fd1728d21e6001283a03
SHA256
d6e231e129104aad63597dd5d9a3da8e4d8bf8407d9c7e26d2daffab4e9e1153
SHA512
78fee06521d327f878af1ee62784ff14f10d2d9e2fd3d7dcdea9b846273eab71267f683ce0a2c8d9c998a50762b446f36db16aeb61bdd556c21c126f7d856065
SSDEEP
1536:J3rnyndfLG/uTbYwfomwZabFpQsErLJV3rS51M/N5ouR4+c8Y0gN19Tk1mJbFpQY:J3qfamvnfseF+sGP3OjEuue5r0219j9J
Checks for missing Authenticode signature.
resource |
---|
c2299a93cb1a371404dfbdae5b0fd2e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE