DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
95bc7b179c2faab3c1f09a60f8491f8a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95bc7b179c2faab3c1f09a60f8491f8a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
95bc7b179c2faab3c1f09a60f8491f8a_JaffaCakes118
Size
89KB
MD5
95bc7b179c2faab3c1f09a60f8491f8a
SHA1
7a23bd25c401ce01cb13865732724ca015d01762
SHA256
0289ee5bd08e0496e3c6ad69046780489a60a51078ede85fe5a65a129704e1e3
SHA512
7b75f889cf6d53d23a37375768943d858527679a8eb4512733905bdd162464cf7abd4c4f631cd0b1fd070717258ab5d11d293d0aba73141bf3106551851e7bc9
SSDEEP
1536:xz64PkTtMOPZnstbbquRX44nq2uZScyqDuxC5uiIlr+wIkGoZtBzsJJhG/OsDUk+:nPiPatKu7wSa4C5B8GqnzsJnnd
Checks for missing Authenticode signature.
resource |
---|
95bc7b179c2faab3c1f09a60f8491f8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE