DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
68e35ef30d3bc55449a35833e7902f36_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68e35ef30d3bc55449a35833e7902f36_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
68e35ef30d3bc55449a35833e7902f36_JaffaCakes118
Size
140KB
MD5
68e35ef30d3bc55449a35833e7902f36
SHA1
ee690f1405f6e18e72162fcde066461e751b50e2
SHA256
cda06dff1afe988a2d83a662a2ee9a7d7752106e99bcfae985b82116f337dbe3
SHA512
ca65d43c79175595678a86c9588fb93629b1663c0aac478bf1e739a6d7b9d62f382f7ee2546e3c0aea2597df42585b13b576e9679ef9ca934ac70e6da95e65c7
SSDEEP
1536:K4maECYZVUGOCu2KXq9RFGkRPF0h8k79Pl5E0HW6JxqRvr2HZVuwt3:FEDvUiumDFGkRPFidkjvAZAa3
Checks for missing Authenticode signature.
resource |
---|
68e35ef30d3bc55449a35833e7902f36_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE