DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
653315bf67dc6a2e42397233f9b95e25_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
653315bf67dc6a2e42397233f9b95e25_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
653315bf67dc6a2e42397233f9b95e25_JaffaCakes118
Size
158KB
MD5
653315bf67dc6a2e42397233f9b95e25
SHA1
1227e3985ba0503c1ac932bd38f48f225e92b6c9
SHA256
1eb8f298ca877a255e13958a148502bde655357318a5f3a3996c0cd0f03928ae
SHA512
c9ab3a7ed99cbf1673e220d54d0aa024a2c30898b588b61c884bac9141785656338914dcb4281265d3da8cd7500843ea257cb0059b31bcd30d9a234a5e4d9637
SSDEEP
1536:xrTB8b/wdCVITw3kzrBqcSwX39XwnsPh4dGPm2+H1U3POdZMUA7UtYMA2Wws/bSE:xvSjCeowUBqcN9gns+g+sPOfMULtAPJ
Checks for missing Authenticode signature.
resource |
---|
653315bf67dc6a2e42397233f9b95e25_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE