DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
cf841e032c57d8f7a259ee373acb7694_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf841e032c57d8f7a259ee373acb7694_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cf841e032c57d8f7a259ee373acb7694_JaffaCakes118
Size
87KB
MD5
cf841e032c57d8f7a259ee373acb7694
SHA1
6ce8792b830801f584c6749f6898bd35df2c19f7
SHA256
7c9d1f0356c05803d2ec4088df01b25727a649f3e4cb3bf465c9e35838d6c181
SHA512
fde644d1854e4322ce9e3066c0f5e01cb31f23e5b37e74df2f2388b075b8a4ba41268f99409aeb38585176388b9b0e20cb288ac2a849facfb7f6378c17e9f83b
SSDEEP
1536:GqvkAHTuFat29gvj1GVgMieXXaeWJxmTxuE3MeO5f9i682xaW8o:zvkAHTUakCzMbi2TkJeO5mmt
Checks for missing Authenticode signature.
resource |
---|
cf841e032c57d8f7a259ee373acb7694_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE