DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ecab8490e1f7aceb1fbdac9ea5a0da67_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecab8490e1f7aceb1fbdac9ea5a0da67_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ecab8490e1f7aceb1fbdac9ea5a0da67_JaffaCakes118
Size
167KB
MD5
ecab8490e1f7aceb1fbdac9ea5a0da67
SHA1
cc77106058054927801b7088dfddf78ac26c91b6
SHA256
ba607e3cac7f3fc570d0c95909f2f0f23237cc3b03bf347d78328d958012f8ed
SHA512
d4c234b43fbe2e834076e734709ea6a68532f924349993bd98031705038a6d4d236806dfdc5757a47ed0a433a9044f9ed40c3ddc57f12ff16f5915957b737ba2
SSDEEP
1536:CrQ8uliwju0fHH3QuY0Z4Lylol7LVpgKCzVrBY5KNFXZ/B0:h8Q79fH0vy+xLV6KCz1BJG
Checks for missing Authenticode signature.
resource |
---|
ecab8490e1f7aceb1fbdac9ea5a0da67_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE