DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a2a8487ead5ffa5172bce2f5f2fbbb28_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a2a8487ead5ffa5172bce2f5f2fbbb28_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a2a8487ead5ffa5172bce2f5f2fbbb28_JaffaCakes118
Size
70KB
MD5
a2a8487ead5ffa5172bce2f5f2fbbb28
SHA1
294f6c0a47cb475a40c887bf3cce291d08417dad
SHA256
197b82bbf5ef8a0624ae4bd000a097b7c7804e0f83773be04908aff03ba2ec04
SHA512
75adb62913a7883acdd03d759287e2fe23a9402f9eb4f48cbcba4d746f1e753ba5c5c836d7fb602a6fef7a36e6daf3138708e74cff15f0fb64b2d57a52caa330
SSDEEP
1536:pggdcGdQPjaM541SweHDKEApK13LEUTNXmMUCt+c0c6Y0ejpy:Clray41SweWE3LtTNXMc09Yfty
Checks for missing Authenticode signature.
resource |
---|
a2a8487ead5ffa5172bce2f5f2fbbb28_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE