DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ef6f9b7335b211cc099928f4d52e783e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef6f9b7335b211cc099928f4d52e783e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef6f9b7335b211cc099928f4d52e783e_JaffaCakes118
Size
87KB
MD5
ef6f9b7335b211cc099928f4d52e783e
SHA1
41c4411cd463c7f5ccacc2d9678bfe0101971890
SHA256
4c45d61a54a032af5dd1594f0d0c9b28a687c6f9a4f394972f5107a3877db9bb
SHA512
422cc77b9bbb74e46a7121818f056029fb22b3cb5469fc432d9ba7d34d3e3c4f641c36444864351f2dd95eeb1f561c57bcb52f52782b42e9131c94ce9ce76f77
SSDEEP
1536:mvTUhHAxViwMw+6eG6s44QLAhE0QY70m1a02mEVxznr/ZMoUnyMw+6f:mFxYpw+6KP4QkqY70mo0251nbZMoUn3y
Checks for missing Authenticode signature.
resource |
---|
ef6f9b7335b211cc099928f4d52e783e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE