DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
8e2e42a6c3918fc553aeb6349d77b041_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e2e42a6c3918fc553aeb6349d77b041_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8e2e42a6c3918fc553aeb6349d77b041_JaffaCakes118
Size
82KB
MD5
8e2e42a6c3918fc553aeb6349d77b041
SHA1
ea21ad9d06d41718e7f3216a01494ed929a8a265
SHA256
9fa1d6c5b99e8a03ce9dd39e07f03951e4377b8faaa8873e3d6fbc8c12efa365
SHA512
49b9d50251b707d3b01e36be4cadb7103db02f99b964d7bb5630bc2e3366b4fdf19537ba2db8d336c7ef6969463b517c9d68a263827c1a4fef70fc6d618d5f94
SSDEEP
1536:853Cp9VfQq4kllUKePnq21Ej98xMYXQzgOGRfHnyYheb5JZ+rW228mIhsbBY21ET:e3CDSqk/4YvLHnVhmZUtK6
Checks for missing Authenticode signature.
resource |
---|
8e2e42a6c3918fc553aeb6349d77b041_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE