DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ded99ccc5059d7f2ead53204b954f225_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ded99ccc5059d7f2ead53204b954f225_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ded99ccc5059d7f2ead53204b954f225_JaffaCakes118
Size
87KB
MD5
ded99ccc5059d7f2ead53204b954f225
SHA1
14eac71e673631e90c84ce29274980c551a17969
SHA256
5b09fcabeb63b9091f731e40170511de7d55efb0d34ed011d141db657eab7002
SHA512
d771cc6d2882e234b5e6c00f5a9b906a677453c257d25a05c099af77c0e605d97dc493823b27e98d71fcf7748dcfcd1bad945ca53ec895d7a7d6e83d6a01045e
SSDEEP
1536:AM0bdJRQ4oS9NHor+U3iB6DxuaW7X0sKzed1XM7NYWDiu8Ur:H0bdQcPH4w6du3uzj9DiGr
Checks for missing Authenticode signature.
resource |
---|
ded99ccc5059d7f2ead53204b954f225_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE