DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ddbc1e44a924b85a8bc287bc68d549ed_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddbc1e44a924b85a8bc287bc68d549ed_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ddbc1e44a924b85a8bc287bc68d549ed_JaffaCakes118
Size
89KB
MD5
ddbc1e44a924b85a8bc287bc68d549ed
SHA1
85361e6ea3836c40687c8e07fe38f32038d63614
SHA256
f2a01f607b5cb19e139f5a4b43c21c11aff8d76047a59603e4b8eddccc9fdb0f
SHA512
a4ba6f5cf1a35c6d162773cc32a292660c84e75bc597bb74c90b8c731c8f9f6c7dcd301844fec18333042aaff4748ae60b7f645108f71ab84fdd1ebd9b4a4c28
SSDEEP
1536:m2jWm6gGO728fi4Ii4buMol1qKTE4toqA5FALZMnmjyoRmJf1F7w2He4bu2:vG4sbuMoZ46Vh+Jf12Ubu2
Checks for missing Authenticode signature.
resource |
---|
ddbc1e44a924b85a8bc287bc68d549ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE