DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3558a87be2004d6f4f76f6ebacd2849c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3558a87be2004d6f4f76f6ebacd2849c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3558a87be2004d6f4f76f6ebacd2849c_JaffaCakes118
Size
167KB
MD5
3558a87be2004d6f4f76f6ebacd2849c
SHA1
5de0b40b4ac9e4e0d2a804bfcf0ce6e6955cccee
SHA256
f8845ffa56cc62f37c07990963a579485800e8dcfe1083be8430e2a357e0c2a1
SHA512
1bee40c060d5f64e3bebda3db27d2e030fcfb473d32d63c6efe154107d3e6968dc5bf510a2e07fe665ff676d470c690279de9a4c2f98f40feee082a877eba108
SSDEEP
1536:iUaza2oMxGL+ouzBwtUxsKdRo15Seqw+HcwCHo8X+d0Y4X3Sbk0rnLiz/C7t:dIaRL+ouVKUxsfxq3SrXLY4X3SbkSp
Checks for missing Authenticode signature.
resource |
---|
3558a87be2004d6f4f76f6ebacd2849c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE