DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a525d0b80073ab52eb2ee5f41a928717_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a525d0b80073ab52eb2ee5f41a928717_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a525d0b80073ab52eb2ee5f41a928717_JaffaCakes118
Size
85KB
MD5
a525d0b80073ab52eb2ee5f41a928717
SHA1
792757c6bf4ff2c7665feacc0ced32f97d961257
SHA256
e6608539d316b619994d464108517ba3c4a74fda1765bcfa11babed4a25bf150
SHA512
02587323aa43fcfaa1def42d46a7398400f97f99ab6a44a2eb2d05cf7e1715680da1e8dda8bd39cfa2b8336d8b5717567c50a2e14f2186aa43486e3602a143b2
SSDEEP
1536:cJasWeOyCAQdjfxmpxVgsgsjhbYo4EILeFI2s8J0305l1A:8yLFsjGsMEIqFU8M05l1A
Checks for missing Authenticode signature.
resource |
---|
a525d0b80073ab52eb2ee5f41a928717_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE