DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c2aed6b84a92c929f2e3e12cf932797c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c2aed6b84a92c929f2e3e12cf932797c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c2aed6b84a92c929f2e3e12cf932797c_JaffaCakes118
Size
158KB
MD5
c2aed6b84a92c929f2e3e12cf932797c
SHA1
bc6c6b27ec9986b831cc9fb16339bf38b03fec20
SHA256
90550e26c8f1572ab4bd8a398fe1607854b12b620ac65e75184359218f5ee922
SHA512
59b126f74b270541aa3a95d2ac095a4c2c80e5dea0a495affa52aea353601705e86df4ad89489298c36285a0711fbd9eb84f67f4e75efb5585bcd47bee0e07d1
SSDEEP
3072:rauEVnWRzOvNBxg8rE3hYWgqSl+Uh1+p7kfMzOv:ranVIzOvNTgT3hfgj11EkEzOv
Checks for missing Authenticode signature.
resource |
---|
c2aed6b84a92c929f2e3e12cf932797c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE