DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fe8e176cb808140fc0c08e0c8a6017c8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fe8e176cb808140fc0c08e0c8a6017c8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fe8e176cb808140fc0c08e0c8a6017c8_JaffaCakes118
Size
59KB
MD5
fe8e176cb808140fc0c08e0c8a6017c8
SHA1
3ed9dbad5f7f1ea2cb72ee040de11a360f45f802
SHA256
1530852fd7a062e8508991e474faccf5e88d3f9628d389e3e44d02408e4d5d63
SHA512
c7993a01bacfa391171771360a7c919bbfef07d2686e128990e8281bc912d3bf7c5098258e196d91bad3665d40834bb70854177203c1ef63a36aa8b563289204
SSDEEP
1536:0IyhQF05LccKlv4I3kiuTezQzx4JzhNwfCdx/e:0IxG5LdYl3uTe0zOzb+CP
Checks for missing Authenticode signature.
resource |
---|
fe8e176cb808140fc0c08e0c8a6017c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE