DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f57808277e8dbb3151247fa7af508fe0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f57808277e8dbb3151247fa7af508fe0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f57808277e8dbb3151247fa7af508fe0_JaffaCakes118
Size
89KB
MD5
f57808277e8dbb3151247fa7af508fe0
SHA1
95cec7ae67505ef9740bb9a8a0708dea7f1f4b8e
SHA256
21064b4e2f9bee8bcaa0a4f0a6350e0247f902213698649473c3386673eb6bca
SHA512
228d2f4d260f77f0bd77f75a83a88a145e76245521977a33b52cac5ae178ecd9ea54dbb63f848cc15dd11b5f2a1d9504ce29d023e2d1d5ded71a114f82e38848
SSDEEP
1536:LWpJTlFm5vK7YjAwSMLgrngfecGBNdhDgT5xApYTGeF1NAScyz29S8oXLUxeHaAP:LWpFm5vXjA8crnvcGRhDgT4pYPoScy6W
Checks for missing Authenticode signature.
resource |
---|
f57808277e8dbb3151247fa7af508fe0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE