DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
8787a718a06f814d54c6a3fd548e69d4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8787a718a06f814d54c6a3fd548e69d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8787a718a06f814d54c6a3fd548e69d4_JaffaCakes118
Size
59KB
MD5
8787a718a06f814d54c6a3fd548e69d4
SHA1
8f1497ed5ccda571dbab7e9271e9257a0fac7cdc
SHA256
48db3ae0abde4c15d193cf994b4299d45ef8ef7805f7fcffb0d291ba6f21598c
SHA512
529f13309faaad077a67235c700d0750b798142246d7b35ae33e32dcbba6d7be0992ac3cef192f36e6d7c370fc7365ce887fa4d5ea4fa42ca7180886b4f05a33
SSDEEP
768:WKzyV78pFgOpreaFCx0N25OzuyfyZiEzQPbMFKTmQVEDwXzaliGyaKlruJBSeAjM:WIycZ9eaF7N25OKIYTxiRjaXJAr4
Checks for missing Authenticode signature.
resource |
---|
8787a718a06f814d54c6a3fd548e69d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE