Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
Static task
static1
Behavioral task
behavioral1
Sample
028b84d25b2cfff06a813b0a6a606660_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
028b84d25b2cfff06a813b0a6a606660_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
028b84d25b2cfff06a813b0a6a606660_JaffaCakes118
Size
25KB
MD5
028b84d25b2cfff06a813b0a6a606660
SHA1
f16ed1b8c20495d0d592578ed7a6f5ac2991fd0a
SHA256
c2835b2a3113c673bcdc52baa419e58f1d02be657ab6e459f221e7b57c679101
SHA512
8699a210776dcc8067e24b63488716e027d28fbe892b32e271eac6f7adf01625d660822ea00d77b88a90de51b232f135212266715b360c12c095150fd1572827
SSDEEP
384:nV5NnTxvpnNLrLwWmHOBBUkeQvqgwepbC36RTVEobQtUI4pSbK7L:z9TJpNcZqBo2ni6VVEiBI4paK7L
Checks for missing Authenticode signature.
resource |
---|
028b84d25b2cfff06a813b0a6a606660_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ