DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d4dd5e7a53d3c5d1464590d0a7cb8fb4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4dd5e7a53d3c5d1464590d0a7cb8fb4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d4dd5e7a53d3c5d1464590d0a7cb8fb4_JaffaCakes118
Size
140KB
MD5
d4dd5e7a53d3c5d1464590d0a7cb8fb4
SHA1
df83a7dd64ab2490044d15072f9f69e591aefe2d
SHA256
f3d115379750e22527b90c69534f884fe30231628a73a3dc5c7a7c6a09e7e99b
SHA512
0a304ccc5b30735e0e1ad169d21292ee2fa5518bd7d73ab84e21dc4961625435a10d63697e4b76b168111f91a42d7eb0a025e590b5b6019beee719f36785b99b
SSDEEP
1536:L2UnO2aA8ygPu+HadYJRXYheY+3OEuJpvHkW7h0W39XuVvfrXNH:L2UnO2aBRm8aGYhJWK/tXuf
Checks for missing Authenticode signature.
resource |
---|
d4dd5e7a53d3c5d1464590d0a7cb8fb4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE