DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
848f038ade7e1bad925889a5a70840f0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
848f038ade7e1bad925889a5a70840f0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
848f038ade7e1bad925889a5a70840f0_JaffaCakes118
Size
167KB
MD5
848f038ade7e1bad925889a5a70840f0
SHA1
5838bb3b8b20e2f27b380053672dd9453d2daf5b
SHA256
975aa2e2fbbe5911de9792f79e2da57741798d75e5624d0208dfc86ee961877f
SHA512
d050ac19a6e659d25b0c4668fc83a6d2e4817ba1bc31e8039086febc0d9ff865bf85a4d0563f5c8f89e2a613953ab2fff78d63aadf124a0e3a9dca8f1ab6b37c
SSDEEP
1536:E+g3Ud+ghboEwimw89HQ2J7Y92o/E7of01IwfmsOCKuu1EYWM2BCLlIdcigaQ2J:QE1oEwHwZ2J42wOYVuu1E+TLad9gv2J
Checks for missing Authenticode signature.
resource |
---|
848f038ade7e1bad925889a5a70840f0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE