DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e8cdd6a28002568d049d1a23af082689_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8cdd6a28002568d049d1a23af082689_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e8cdd6a28002568d049d1a23af082689_JaffaCakes118
Size
167KB
MD5
e8cdd6a28002568d049d1a23af082689
SHA1
a60bb967cf1505629508c375c6a810c6780214dd
SHA256
14fa8984417bc1479b0aac82cbfd6dec4976d8a9563888f0595aea31bde38cf2
SHA512
23e8f06b6f08c34d34263051aad4785ec41b36e99fd65a884752a56b8f0d4d4b82da89bbaa1a09fc1401ecb187390a70ee546eff67e2ec4530a44a7ba8b05b68
SSDEEP
1536:FytWyVv5a8eujg8sSZKU1J99H3Xe/0ucyH/OsptUhgWndPyxpa8TFPTk:ctfv5aNN89fH3Xw7nt3IF8pa8Tdw
Checks for missing Authenticode signature.
resource |
---|
e8cdd6a28002568d049d1a23af082689_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE