DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d3fe16e8a55519695196740fbd4b94db_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d3fe16e8a55519695196740fbd4b94db_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d3fe16e8a55519695196740fbd4b94db_JaffaCakes118
Size
59KB
MD5
d3fe16e8a55519695196740fbd4b94db
SHA1
ff4700b881a7cd347fc41b4bac221810dc3f7b40
SHA256
a3f6f17dbe328b66ad9d5ea309abbfbadcae1b88aa2983493141c3bf721bd4cc
SHA512
2fa31c5bd35278ee64139bec0ed67ae76ddffc7236bab15a6d841b250df7b27d17501d928a11bc946d8553636e76fdeb1d3c864c23e787ec62e3648ad3613681
SSDEEP
1536:KIy1IXBgw81XneUH+mnqYVXpJFXSDL3v5rfTb7gJMflbgu:KItxgw81XeOXp3XSvhfTbD9j
Checks for missing Authenticode signature.
resource |
---|
d3fe16e8a55519695196740fbd4b94db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE