DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e283a3fce6f17b9b517020f93ad1c0f5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e283a3fce6f17b9b517020f93ad1c0f5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e283a3fce6f17b9b517020f93ad1c0f5_JaffaCakes118
Size
158KB
MD5
e283a3fce6f17b9b517020f93ad1c0f5
SHA1
601a8f7c72ee3d09a509bb46951497bf2d3fcf27
SHA256
ed23001f624888535e8b8628d9c3d2bb57b97673a0338ad3e3ecab7d3a394944
SHA512
a3936c49e8d7acaa1fdfb5b224c793bba86d4b6e2daf616ecbd192b789360d7e3cd9c5552676d29e991f16f2b728a8c9b5d2c9cd63ca407ea5e6ac12a0f659ca
SSDEEP
3072:98iBoDkoXzR+3szUbt//B8xd9279Zjf5:98iBkkoXzR+ca//B6A
Checks for missing Authenticode signature.
resource |
---|
e283a3fce6f17b9b517020f93ad1c0f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE