DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f7698197712d6c9169adfb6a58b24124_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f7698197712d6c9169adfb6a58b24124_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f7698197712d6c9169adfb6a58b24124_JaffaCakes118
Size
92KB
MD5
f7698197712d6c9169adfb6a58b24124
SHA1
6cbe8049100d793843a19f54cba7c0393a6adaff
SHA256
54f9a0a1fc30da817f0df62a0109b1d177010d9e43328b9ba7d5bac8c611bddb
SHA512
a820775fed9ba23060fd7ecd720ac094bd7aed806614d3c1e6f0f80517f931404223d08b7b4675a3e67e52fd18ac46331400e3dd01d5d27e47a6ac4fe23ee7b2
SSDEEP
1536:aSOYXBaVtdHp1gXFJaeEre2d+KzDGyQgPpRnyAKR2SrKgkm+dW4sT10sa4prJtDt:avVtWXF8e8ew+eogfyA02SOFN+5zH1mo
Checks for missing Authenticode signature.
resource |
---|
f7698197712d6c9169adfb6a58b24124_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE