DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f29f367f0bb0343ce2beae10e2541d76_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f29f367f0bb0343ce2beae10e2541d76_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f29f367f0bb0343ce2beae10e2541d76_JaffaCakes118
Size
90KB
MD5
f29f367f0bb0343ce2beae10e2541d76
SHA1
30c7ded0e0628a0144b810468fd4b154ae19ed2c
SHA256
c845deb7ca2f7b10a7faa7d6c2385db8fa3b629630b437caa63ad39d8be19bb4
SHA512
2ce07f44393002244e1d821ed8c8e05fa7e183bfc4813bacb760c647a05680954e7572478d1bb312dccc4921d336275f141a9746d41ee3285eb4bc527d7b684d
SSDEEP
1536:5/l9ELUinknRvWABkmYeqpS1Cbaez80xkTgZPP81Azdk/EblaYe8:5/lsUiknQAFYequezzS0x8uQAaYe8
Checks for missing Authenticode signature.
resource |
---|
f29f367f0bb0343ce2beae10e2541d76_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE