DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
dc51a3aa493e501896de7e3291589246_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc51a3aa493e501896de7e3291589246_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dc51a3aa493e501896de7e3291589246_JaffaCakes118
Size
88KB
MD5
dc51a3aa493e501896de7e3291589246
SHA1
61499293a37429d33d2832b19b0b6bfc355f7599
SHA256
093bff4d1c031845d7bedab046d0226e8ee79fcf30491006356c025db2d677bb
SHA512
c8ed3af6a5592641edc249d32188a8941dca844969331e4ee8dd65f2a0be085e08cad814a4abe6b1ad3a948cc2a6c905acf9c125a2fd2b152e4c1245cb8d928e
SSDEEP
1536:E+d3zg2iKuKLMztawS9zUYisz4rbaZo5lXoUn/Bn8xg5iWqUz/hLcOva9zm:TN0lKLu8V+1szUbt//B8xd9UZwNQ
Checks for missing Authenticode signature.
resource |
---|
dc51a3aa493e501896de7e3291589246_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE