DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
39bf8a5ad89a5548d71aa41e53b43566_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39bf8a5ad89a5548d71aa41e53b43566_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39bf8a5ad89a5548d71aa41e53b43566_JaffaCakes118
Size
184KB
MD5
39bf8a5ad89a5548d71aa41e53b43566
SHA1
cb24c2b5839dc1d025a43f0dc7a939adf8d51027
SHA256
ddaf1d3be9ce97a404a1026ffdc8bb44268c2d95b830812f7bbfbc74e1f55686
SHA512
4fce57085391d1e5dd489331a9f9ad37d192b1aa4ab3d64b061108aed2c3e6f1bed3eba2242818b76ed051b48108359975a2393b104332fb2b9acfc3158f0f70
SSDEEP
3072:OgcmieZXUwbLxVvsIPCgl/92AkJm9owaMrBBY+z6DaGSok1:VzZXUwD6gl/92ApNbY+z6e
Checks for missing Authenticode signature.
resource |
---|
39bf8a5ad89a5548d71aa41e53b43566_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE