DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fdcb83cec9b0e4b69858454251ed63d9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdcb83cec9b0e4b69858454251ed63d9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fdcb83cec9b0e4b69858454251ed63d9_JaffaCakes118
Size
167KB
MD5
fdcb83cec9b0e4b69858454251ed63d9
SHA1
3e67d2681db8d5f96cd8f80c3e57ec4f8bc09a38
SHA256
3af3588abdb1746ff04fe50c200db9669ace3b0bbcd72271b2798fa47b1e5f9a
SHA512
22f33862423d636f07bd358fc937798c30bbaf6376b47c32a6b41fdb2bf44590fbfdddfd6995cbde8abfe25b076a47cc813e88ac65ea558ac777de4978050c79
SSDEEP
1536:TG2A2a9JFpoZ3ym0rkJ4C4R+KXhlIN5CeAeaLJGeE8j+xjGZ:TGT59JF+RkR+KXhlIfCRDJ7qw
Checks for missing Authenticode signature.
resource |
---|
fdcb83cec9b0e4b69858454251ed63d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE