DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
16e44c67735c68ccf78eb60abf0a2b5e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16e44c67735c68ccf78eb60abf0a2b5e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
16e44c67735c68ccf78eb60abf0a2b5e_JaffaCakes118
Size
80KB
MD5
16e44c67735c68ccf78eb60abf0a2b5e
SHA1
b337cb89d3b71e71d6da340135c5e704a1326db8
SHA256
130203abf5c9e5af5d598f8a190457a7298735e07d7b0c43a8793c82e6fd7d67
SHA512
41bf087f32a40f31984623df98307048ced8ff74ca5b2f9d0955ace00159847f271a8fe527e55787ebad21982697134be645ceff9a36dd16192b78e26c9c2f31
SSDEEP
1536:HwUPYbB9fyHuX05mBTJxu1UjQ+0KJGUOgbOT2MKAyj+V+P:QUwbBlyHuX0U9xuWQ/KJgqaKvW+P
Checks for missing Authenticode signature.
resource |
---|
16e44c67735c68ccf78eb60abf0a2b5e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE