DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2ea912b790280291880a26b0472b238a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ea912b790280291880a26b0472b238a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ea912b790280291880a26b0472b238a_JaffaCakes118
Size
53KB
MD5
2ea912b790280291880a26b0472b238a
SHA1
8473f712186d8f556df922e4f5c50e20d95d50ff
SHA256
13cf40d726acc8021bf35e7a1b4599719c3febb41490eb35254f3a7099159beb
SHA512
26a216cfae5f27fa2196314c7ba23570cfee93d8c02d1ee5ea18adabec22d3f1fa18a79acb8dad5feb65b757b15ca46a8539188f2b7762d065d1f374a50e187e
SSDEEP
1536:e2oU2rdtRfptuCcLeW9pRCPoHq4EMasKR:eiwNptuhLB4PyqWax
Checks for missing Authenticode signature.
resource |
---|
2ea912b790280291880a26b0472b238a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE