DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
35352b5836234725d02daa7b269f57f7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35352b5836234725d02daa7b269f57f7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35352b5836234725d02daa7b269f57f7_JaffaCakes118
Size
158KB
MD5
35352b5836234725d02daa7b269f57f7
SHA1
b3a9ea51fa9bb2882264744a9e5f541b399e4e02
SHA256
6c3278dbc75b453c57c58c15138e232165361325adfcb91d0581d437d17594f0
SHA512
f765e0a7884d679af577fd1e67e34da2d7c74d2eeb10ee474ea74289c5951e94576fd0f2bf928ebf0e7a55f61828bfaf300b690344e91857e8fe54202072637a
SSDEEP
1536:Xr6VbSkvtEek13ukU0swrHlHZsz4rbaZo5lXoUn/Bn8xg5iWqUcK89RDO0gh6U0:X2VmSyek1gyHlHZszUbt//B8xd9nD7+
Checks for missing Authenticode signature.
resource |
---|
35352b5836234725d02daa7b269f57f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE