DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
23f65b358dd6a7e177538f97853d64f2_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
23f65b358dd6a7e177538f97853d64f2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23f65b358dd6a7e177538f97853d64f2_JaffaCakes118
Size
158KB
MD5
23f65b358dd6a7e177538f97853d64f2
SHA1
72aaa6dfe7dc7c86461695e2bf71c419c4e30359
SHA256
b62793bd4d40a4c5a36fed1f4efa0a1dce72627a73e0f14297b0ef747ea8849d
SHA512
4aa5b1ce0416957d84c147f17db8b00b99328584e37be64c06132ea301531c9a78f15ff3ffe2d6d7ba95ad7e6f9f859f40133343a83c05d01b2c6145592afcb0
SSDEEP
1536:w5P2buAx0a8xKNqgTZsz4rbaZo5lXoUn/Bn8xg5iWqULULI7/VkKNq:6uV+xEZZszUbt//B8xd9OKS/VkE
Checks for missing Authenticode signature.
resource |
---|
23f65b358dd6a7e177538f97853d64f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE