DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
df277f5b881fa48f4286247b32464576_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df277f5b881fa48f4286247b32464576_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
df277f5b881fa48f4286247b32464576_JaffaCakes118
Size
167KB
MD5
df277f5b881fa48f4286247b32464576
SHA1
52a5699e7b61f6c4c322ed350f7a40125da61504
SHA256
264890c36e43f5360459076739ee0065b450d110e68f4df2dadf431bd30f8302
SHA512
a2b2a4237ca7888a7e4a9c52a3988a313667946213791e7f56ced7a2ce2dfa169b02a17e0e5f825e2e9bf29f899956c057673516ba0e6d027233928c2afe6974
SSDEEP
1536:4ECFW91GATOHtS+lLf69gP03OXMHrsg7FFGGyq18rHx/8AiP+x:/CFgg8+lfV0YMLBPGFvHnk8
Checks for missing Authenticode signature.
resource |
---|
df277f5b881fa48f4286247b32464576_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE