DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d13ca7e1851ff22afb819ec4a03d054f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d13ca7e1851ff22afb819ec4a03d054f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d13ca7e1851ff22afb819ec4a03d054f_JaffaCakes118
Size
89KB
MD5
d13ca7e1851ff22afb819ec4a03d054f
SHA1
3a944c4ab64dd1af42e48179714972b1b8b14cc9
SHA256
ef744a953ad8f727dfeb14e48553faa55f6ef947d984ece4db504a338dbd75f8
SHA512
b7d8ad3301d3ca4c4a52e63968e774064ae410ef415d186e427a8004464834824c7727f107cc2614514a962312180a65440b6e577696d2c650fa9a7185c9195d
SSDEEP
1536:29vWkVLbeqgePn6jRLfWRCxR4reCqrlTzvskTHCpUaep30Iht/M5vy3Ly:29vWklMev6jROE4LqCkbSh030IrEoO
Checks for missing Authenticode signature.
resource |
---|
d13ca7e1851ff22afb819ec4a03d054f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE