DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3aaf6bddcfa2f12a618883a18d31abb4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3aaf6bddcfa2f12a618883a18d31abb4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3aaf6bddcfa2f12a618883a18d31abb4_JaffaCakes118
Size
86KB
MD5
3aaf6bddcfa2f12a618883a18d31abb4
SHA1
6f5c62ea5489eeee31ccb31d34e8b1eb559f7ee0
SHA256
fdd9a6c397951fa6522b89ce732f8d91ba82bfdb4613e5f9ca1d0b9ce1310e5b
SHA512
8144d0137bfd222bba0e637491f2f67987ff951e79a6caa4d63ce7dd8bac3b506febffa2322bf52bbd4cda12ecf32df6936f9a95945be10fd887b17f15ce1cc0
SSDEEP
1536:JR48f7hYgLojBIt9kLrsz4rbaZo5lXoUn/Bn8xg5iWqUNaL/zo+sIuJ6:J+OGjBItgrszUbt//B8xd9VL/zonIuJ6
Checks for missing Authenticode signature.
resource |
---|
3aaf6bddcfa2f12a618883a18d31abb4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE