DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
eddad4065b9bdd547d6cf3eaf100561a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eddad4065b9bdd547d6cf3eaf100561a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
eddad4065b9bdd547d6cf3eaf100561a_JaffaCakes118
Size
137KB
MD5
eddad4065b9bdd547d6cf3eaf100561a
SHA1
6429fac33846d758448c3590ff4887ca324b2546
SHA256
1205822707e4d6f36af7ed0c18f5a32263ef3f05a5322403d5f200544cf3a996
SHA512
4431b7c70e42c485bb285e8db126d1dc58f19a65f7aa81f730c32ec13eb508be47d6b508feb4f120d12ea11421a48dc0f9232a11a48f2e5a53b6f0cf0882276e
SSDEEP
1536:SE6M68A+K1hDGeF/VI19+oamEA1auajBdHE1uP0L1jTQEtPomiqV:bM5GeFN0Gmv1auydHE1uE1jMEJL
Checks for missing Authenticode signature.
resource |
---|
eddad4065b9bdd547d6cf3eaf100561a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE