DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f523f1f0d3c3b6ba7ac0dd0bce576d14_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f523f1f0d3c3b6ba7ac0dd0bce576d14_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f523f1f0d3c3b6ba7ac0dd0bce576d14_JaffaCakes118
Size
87KB
MD5
f523f1f0d3c3b6ba7ac0dd0bce576d14
SHA1
c372953f77dd5af1f353c537f4f2ae50e1f5a169
SHA256
1192782f4c6f030b846edeb3349afb8d701acf5a3a1677bb60d306c2282b18f2
SHA512
bc4b4cc03bc9cc2d7996f1521fb1a9295856ad9c5113e9b2c5a604bdf56e44b2f00289abe5f029ed7422e538740b8775a6d910da902020483aff290b6462c70d
SSDEEP
1536:Lo4uppElC4uASQjxsgexagxtUJnrEVsz4rbaZo5lXoUn/Bn8xg5iWqUPmNDQhRRQ:LPqmkAf6hhtCoVszUbt//B8xd9xqEjbX
Checks for missing Authenticode signature.
resource |
---|
f523f1f0d3c3b6ba7ac0dd0bce576d14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE