DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e78651590e02bd5aa5aa34f00026c665_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e78651590e02bd5aa5aa34f00026c665_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e78651590e02bd5aa5aa34f00026c665_JaffaCakes118
Size
84KB
MD5
e78651590e02bd5aa5aa34f00026c665
SHA1
4fe78927657c4d2cc2a0d0216d33f1c9f6dfc524
SHA256
f5a832969bc99beaf5a8c65daa2e8bf8a653dde85ea461c4059b7d4af9e334d5
SHA512
bc68c36843579e1bb294444b3e70ad017dc0485cdf38915710c42720d3ec403a7c1f21d2ef60fb3f3bfdb056eb6b1ed99172c03a63e4468195091c0135ace8a7
SSDEEP
1536:nT95vkVB4xc0jVw2ztyYs13uirnD6cXLgy67/v98dSiaSX/tFe8AUntyY4:TTvkVBT0lztWuirD6cXEy6idLX/YUnt4
Checks for missing Authenticode signature.
resource |
---|
e78651590e02bd5aa5aa34f00026c665_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE