DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d30b13b5787c157e9c2ed9acc91e7614_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d30b13b5787c157e9c2ed9acc91e7614_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d30b13b5787c157e9c2ed9acc91e7614_JaffaCakes118
Size
140KB
MD5
d30b13b5787c157e9c2ed9acc91e7614
SHA1
baf4d661444f5b446a95a786bc4976c76011e21e
SHA256
a5afea651e3f2b0eb2165e3c735832780ff46facbc4273886e985eaf798d54ee
SHA512
4c092c2294528c0aa16a77204c942ac4e414b77ac8a63bc2ca10039af7e2ccc6f13638871a1edd58eed2c164d0d8f0b56f8ed443146bb4e19945a7a6a9da4b2e
SSDEEP
1536:8e/C3Vf4XWpaI4j3AMoWoGibZL98IVzCof+ycEZdnuHZ3E0TSDCxa8y/U3AMoWo:v/CfP83kdbN9t4ybgHO0Tyy0U3k
Checks for missing Authenticode signature.
resource |
---|
d30b13b5787c157e9c2ed9acc91e7614_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE