DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fc40cbcc919bbd194ba731c57e954f8e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc40cbcc919bbd194ba731c57e954f8e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fc40cbcc919bbd194ba731c57e954f8e_JaffaCakes118
Size
140KB
MD5
fc40cbcc919bbd194ba731c57e954f8e
SHA1
3b2aa57a142875762638491865f89172a595112a
SHA256
7050554fec8497ab3742559ef957c84d5bb09ce1df44f49a5310ea1b9fb9f3c2
SHA512
f977f1dc36943437f1e93463c032d1b96c6ccc3c098c68a3e0cb6e1ca1e49d62cae1c6db49abd305cc23024cf4466a0b77e38ae2451c8a9aab31e466194c8a54
SSDEEP
1536:TGJHqbIc76Ztd2adorCVjmBuVvsjnHY7JPkvBkd2:qJJc76V3doymBuVEU7JP4BI
Checks for missing Authenticode signature.
resource |
---|
fc40cbcc919bbd194ba731c57e954f8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE