DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f6f1525473568df51845b5dda3a2b3fb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f6f1525473568df51845b5dda3a2b3fb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f6f1525473568df51845b5dda3a2b3fb_JaffaCakes118
Size
167KB
MD5
f6f1525473568df51845b5dda3a2b3fb
SHA1
7487cf11f2f14b27cd989062d9d945e6380e9bab
SHA256
ecefcd2057b5a267eba61f5af2f778fbe9ff388e63f56f94ef01dda56a7b4b18
SHA512
071db29f7c58cf2bd9b707e8c0882aef70cfd231de1c2f4ef91101b85c43e496a2b2d79d28db962b61f584ae525c2c4b1d46af48e82c20dd7ffae9dcd9b2806c
SSDEEP
1536:CQYCS3A+q6WTaDw0ZNz0FhfTLylol7LVpgKCzpTrnNbR7ZP3FUKyZ:CQ35+qDaDw0EHvy+xLV6KCzp3DN
Checks for missing Authenticode signature.
resource |
---|
f6f1525473568df51845b5dda3a2b3fb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE