DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
dec36e46e9c9e088ac16d96fbe8d0c55_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dec36e46e9c9e088ac16d96fbe8d0c55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dec36e46e9c9e088ac16d96fbe8d0c55_JaffaCakes118
Size
158KB
MD5
dec36e46e9c9e088ac16d96fbe8d0c55
SHA1
e9905ca17dbb6368d6228af16b3bbfb8a4234d23
SHA256
88c820e642919784e12a95615ffa10c77d5eb883b0596bbc049d7803ee99c42d
SHA512
88b176250df745cb6792338cc3ba8daad9927b744e6db69e6e1c5230a52f60545af7cc7677d85964215a5441e9dd6ee4fb7378fb327c5d03bc84bb64e6a7bb72
SSDEEP
1536:AjuscGuE/1j3ljjnYtEpD+Cw6lg9lopSS1mTy9+tNAzTKFNm3eK9A1Boc4oB0qqC:APxtjtj4ambopF1mTy9g3FNkA17ozha
Checks for missing Authenticode signature.
resource |
---|
dec36e46e9c9e088ac16d96fbe8d0c55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE