DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
39546d9bd6f68f5ac23a802afebe6d8d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39546d9bd6f68f5ac23a802afebe6d8d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39546d9bd6f68f5ac23a802afebe6d8d_JaffaCakes118
Size
20KB
MD5
39546d9bd6f68f5ac23a802afebe6d8d
SHA1
0385abcc0aee561fd4f660a699cf7abd2db0c354
SHA256
33983ae8d94cb7830802a48316e8fc7e37b90c0806112487171147e8a57f045c
SHA512
4c6a6f709fc30460ad72a56f6828a4943d51801fd9e25702ba83d912360325b73307e0e6bf91c29133f008e3965016a8247f13137f03dc9c186ecf44d1cc4aee
SSDEEP
384:xs0CQMRWi5BkF9usYcLJrLrI0Ss8o48BIwws8PYrUDqc:p52WYmF4PcLJj8o48BIwAPYQL
Checks for missing Authenticode signature.
resource |
---|
39546d9bd6f68f5ac23a802afebe6d8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE