DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f057cfe17ae041bd71bb8c83e0f9b04e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f057cfe17ae041bd71bb8c83e0f9b04e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f057cfe17ae041bd71bb8c83e0f9b04e_JaffaCakes118
Size
86KB
MD5
f057cfe17ae041bd71bb8c83e0f9b04e
SHA1
5e25b3eeae2c267772e8801beddf25888795b938
SHA256
970d42841b66809e9ab60ccd3ceb9b3d1ac0ecd28ff2a163cf6023d895c524eb
SHA512
411a71037092268058a02b784a7012ddda4918ace555d91d0cf1660b57524b86b4f772092d5bc7b1b509d9094064b6e818863ab3edc65d1412acb029189fbf50
SSDEEP
1536:6G3Uy3q+boFiG7VeTTKwTpdekD8NeHZKLMpIhkCpabXrNiTD2uiiOF1paAVUWTTm:vEX+b3SAauuHNeHZKLyjEabXrNI1iiuC
Checks for missing Authenticode signature.
resource |
---|
f057cfe17ae041bd71bb8c83e0f9b04e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE