DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
858a531fecd2d1c6d7fa86ebeee69df6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
858a531fecd2d1c6d7fa86ebeee69df6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
858a531fecd2d1c6d7fa86ebeee69df6_JaffaCakes118
Size
85KB
MD5
858a531fecd2d1c6d7fa86ebeee69df6
SHA1
4be6d5242e5f08b0bd094e7a20755fc5412dedb9
SHA256
24662c60b1a58cacca31e76ffd0319510a22e7d95e8c9e91edcc01d82b73c6cd
SHA512
4f62dc2f3c9ff9f4736f86290653ca29db55dda264a9c36da8b5b70e0124bcb20a028497a6053871250063367c22792d47c812541662d0161180345b7c9e4211
SSDEEP
1536:V+C3J2dYBaLkZulsU3u19wNW7aDj9qUTZ7HkPLGnobymL2XoJZc3ZyzY6gTs:12WaLFlsU3u4AUc3L4ZqYDA
Checks for missing Authenticode signature.
resource |
---|
858a531fecd2d1c6d7fa86ebeee69df6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE