DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
412458bbc70ca1f4fe79b5d3676a7bff_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
412458bbc70ca1f4fe79b5d3676a7bff_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
412458bbc70ca1f4fe79b5d3676a7bff_JaffaCakes118
Size
140KB
MD5
412458bbc70ca1f4fe79b5d3676a7bff
SHA1
f793fff071bf2518b2e56952f6090c1a0e74cca2
SHA256
a97ef13a514e111ee18f83894858fa7777f6dbeb69d6a291d5702b0d2bb8ffcf
SHA512
601929c0d5e677beaf3eb5158e21c04daa1f616f4eab8493ae122f1bfd9a8ef88a61229ab070984250b0af59479c0a851b0969620665a633586fd4259015ee1e
SSDEEP
1536:HgIG3dxBhbOyWFsCGcJX7YRPF0h8k79Pl5E0HW6Q3sMOdrfSI:HgIGtfhFWnGu7YRPFidkAzVfS
Checks for missing Authenticode signature.
resource |
---|
412458bbc70ca1f4fe79b5d3676a7bff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE