DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
dd80d78e0c69868889674fbebf879080_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd80d78e0c69868889674fbebf879080_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd80d78e0c69868889674fbebf879080_JaffaCakes118
Size
86KB
MD5
dd80d78e0c69868889674fbebf879080
SHA1
90c44b2ee492355f235c47dd77d01fd2c3d872e3
SHA256
06a684fd0ed67b25267c95e3a3d5855c9b39728067ba632454d3117fdeb68c8f
SHA512
72436bc4b8a72535d6a974c53af93bba49143179781dffcfa760752b1119c82280e3021cd622b81325d792e30b3dcde4ee9f8cc4c22e6a7b4fe9f625a32e4cb5
SSDEEP
1536:PXNp1zKBQXJjQov/HIdXOsR9m7N9Wsz4rbaZo5lXoUn/Bn8xg5iWqUrCjffSnGbU:PXL1z+QsPYJoszUbt//B8xd9g6fjNhc
Checks for missing Authenticode signature.
resource |
---|
dd80d78e0c69868889674fbebf879080_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE