DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
dd2385afcbbbbdd7a928cfac74b8f6f5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd2385afcbbbbdd7a928cfac74b8f6f5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd2385afcbbbbdd7a928cfac74b8f6f5_JaffaCakes118
Size
86KB
MD5
dd2385afcbbbbdd7a928cfac74b8f6f5
SHA1
0154cfc228edf03a8f7711f022bfb44524b92165
SHA256
e0cb812359801a7acf1605801c95c4e5baf6f11e82c11b50f3fa26fbbae18af4
SHA512
d2992e0dcc032cd24a512184761cdebaa5e5cfba36aa22bd0c661311d332ab111c883ea1ccbabe1108b2b908514ad1edf8d8969bee6c18c3c4f32224989b4659
SSDEEP
1536:SX67N0M3ng1OLUPsq+uPlr9qb7sz4rbaZo5lXoUn/Bn8xg5iWqUPNCaBNbQE9L7C:Q6B0M3n8OLUPjPlr67szUbt//B8xd9yK
Checks for missing Authenticode signature.
resource |
---|
dd2385afcbbbbdd7a928cfac74b8f6f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE