DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d134d6ebe12dce1afd09b749f7a5365f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d134d6ebe12dce1afd09b749f7a5365f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d134d6ebe12dce1afd09b749f7a5365f_JaffaCakes118
Size
88KB
MD5
d134d6ebe12dce1afd09b749f7a5365f
SHA1
c64acf8bad92ab44d93bd6b6fe73a50dcdc9e390
SHA256
e60358f11ac6e2c019a5a79ce48bc1609e9f329fb09103c72480d69c124dce30
SHA512
0b510258439f95273d7379b3332f73c7dbb6900cc8f203a5bd8f4974ac7179d315fdc11455d58d620aca3a22c9d93be901ae46819e61dad18987298d5b65decb
SSDEEP
1536:sNP7dna0uLTQn7xWY79wPHlpITIl7+pWNWpS0k9PkqzuxZJLTQnX:eVaJQ7xWYBwPHTITk92S0GsauRQX
Checks for missing Authenticode signature.
resource |
---|
d134d6ebe12dce1afd09b749f7a5365f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE