DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
148c229d12d8241f9c54b76b7f59dcf6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
148c229d12d8241f9c54b76b7f59dcf6_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
148c229d12d8241f9c54b76b7f59dcf6_JaffaCakes118
Size
86KB
MD5
148c229d12d8241f9c54b76b7f59dcf6
SHA1
fe31baf30e0736683129d584dda8d88e38d155dd
SHA256
ec3b7853123796c750a70bf3718c151a872721888b23607c6e25f98990b7c1d3
SHA512
4921149bb3cc15f702f45b87ffc1409f44c9bf10aede6e9b5755ffe1a50ff7e2829554e4a056a7d9c4f25758b43641ad4f0a81ba1a0dc2cdb5d4d44be8f07793
SSDEEP
1536:EjbT/KAozDBTjugrHEBjaNjhMDAQpWoCqkYGbRTn3XRZblHDI0VXF+mf4B/gF4MD:cbT/BovBfugrHEIZO/kFR3XnljdhF+mB
Checks for missing Authenticode signature.
resource |
---|
148c229d12d8241f9c54b76b7f59dcf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE