DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d0d443f525ed90f12e7d48c69e5f8298_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d0d443f525ed90f12e7d48c69e5f8298_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d0d443f525ed90f12e7d48c69e5f8298_JaffaCakes118
Size
88KB
MD5
d0d443f525ed90f12e7d48c69e5f8298
SHA1
efc1a45ed7883aa4beb422926e9bd810ebeed080
SHA256
3909bfc18058b2a2ca8db4f98c26967bcd83d323cf839a2dc956ab0bf362a40b
SHA512
fbe2683c22d8d6af9057bc69be43462f9668a1a0280e09e1b8924b4c7069aeacbf8ba42704e759551951756c2b25f3bd44a2c5e6e1ed12b0186226ea2c88fc57
SSDEEP
1536:FJvjaQZbD3L4N0v6xkofJapNK8ZdDDIJmdCSQgmS57CpWSyNca8sqldCOAQjMk0:+GbA0CyzpYOD8FC7CpWeNswge0
Checks for missing Authenticode signature.
resource |
---|
d0d443f525ed90f12e7d48c69e5f8298_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE