DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
452eb738040dc337c11d06dd3b0bcf15_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
452eb738040dc337c11d06dd3b0bcf15_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
452eb738040dc337c11d06dd3b0bcf15_JaffaCakes118
Size
21KB
MD5
452eb738040dc337c11d06dd3b0bcf15
SHA1
94f7260be0b008b99ad0a22d785fe84746c6d2d1
SHA256
6b70a35d29eb610af353abb01d28d502ef336928204c4a4e021c2be586c10b30
SHA512
04af268b485c9eed1053cddd53bc261d02321524a7622d59bcd8a78981c32331367d2c758c3eeb3acf81a001c349d33aca9f17f8ca20fbdb1d3d08cdbbb66843
SSDEEP
384:p9RdCy1MqlWhmQ2u0dceLFNdq0VptDqXmZXpQLfduj7BORATFaXAHh:jCyCqlwmQuhdqyDqXmZ6DdktO2Fr
Checks for missing Authenticode signature.
resource |
---|
452eb738040dc337c11d06dd3b0bcf15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ