DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6f7ac66beeaf5432593c0e8aa62ae5b5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f7ac66beeaf5432593c0e8aa62ae5b5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f7ac66beeaf5432593c0e8aa62ae5b5_JaffaCakes118
Size
88KB
MD5
6f7ac66beeaf5432593c0e8aa62ae5b5
SHA1
afa8e47bd31c2391b1124ff6ab017370474ad81e
SHA256
6b59ba5e7f52728e0122142d7c4743a229e0fdb577e3d6f4c1c58ac260aae0e5
SHA512
3fce9c3901552e74f0da279b212764f03cec70e539cf0021d0b575d5ec36f76bbcb586c30e0051ed81d683e1bba7741db552e6bc9940ae21791885d989de0a05
SSDEEP
1536:8HLtEMfoVT+bc0JRHcmVAgx9j12GtcMQRi9mcU/x2J+pvPysAj01fjYVHc7:8pE8oZ07HcmSk9jRtURi9mcUAGPT1fjZ
Checks for missing Authenticode signature.
resource |
---|
6f7ac66beeaf5432593c0e8aa62ae5b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE