DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
8a4d1723720ba70648d1639d6ef70712_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a4d1723720ba70648d1639d6ef70712_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8a4d1723720ba70648d1639d6ef70712_JaffaCakes118
Size
158KB
MD5
8a4d1723720ba70648d1639d6ef70712
SHA1
9d6433513d5b3cf3664d1aef2c5c59bf558ee0b1
SHA256
f62bd854f0b5e51e0525d4414c399c8c7675f0d973a1c1d860aff6b1d87b34eb
SHA512
6e7186d57f3103fd654fea2dfbedf9038b2c14d7444aa5c7f5a8431ba59b2db2d255e3b4b748582c333074e4d47d8a51af8924b3c46eb60894c5936acb4a5e72
SSDEEP
3072:xBPDIr+KDY1kLMxWszUbt//B8xd9xqEjb0PP:xpIr+KIUMxla//B6dv
Checks for missing Authenticode signature.
resource |
---|
8a4d1723720ba70648d1639d6ef70712_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE