DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f55ab39857b930eda892b2911450af3e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f55ab39857b930eda892b2911450af3e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f55ab39857b930eda892b2911450af3e_JaffaCakes118
Size
140KB
MD5
f55ab39857b930eda892b2911450af3e
SHA1
b4aea2159fe52df3466fdb598c44e05037571888
SHA256
21687f5a77f4596aead96e06bc9286be9dec92b0d1581f5da0e83aa9eaf849f1
SHA512
a7607cdad1379182602beb22bf51a6809ea108171b4a7ff81a3dbbb713078591492ced9a6a1f51ab9f3b78aa099783f7f9dd8dbb740373e3cd5a6ab2152680ea
SSDEEP
1536:Z7Fj19DlmO3H0nCFXd2fg0ACby4I65L2e36yX9jcoRiDD3v7txUfjOT8QfHjfg0:lF1m+ZQL3j5SeBcKAJyVQf1
Checks for missing Authenticode signature.
resource |
---|
f55ab39857b930eda892b2911450af3e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE