DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a942d6da75a0453d534fb8a6c1bc5e46_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a942d6da75a0453d534fb8a6c1bc5e46_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a942d6da75a0453d534fb8a6c1bc5e46_JaffaCakes118
Size
85KB
MD5
a942d6da75a0453d534fb8a6c1bc5e46
SHA1
c8412179709e979659a010ecd08906cfbb18ecb0
SHA256
a7a73ef845ee7123c5348a1b124cb5f4d9e9bee95cab98c5514c387b8bf09310
SHA512
dff11400e3538a9f8e00fb5c016dac0e7bd582dc0558769dc07274df2864250c740709d48928e8378fb7fbfa9dcc11085223f97375d579c757b3e79ee14583a8
SSDEEP
1536:wRtJ3PlvMJ/+Bj/3mCnUqmlAVcI3M17XkEaocyl1uq4xi8FU1C05/Eb+eXe42Bfo:wRt9NvW2TfurI3Md05oBHQi8FU1Ca/Ed
Checks for missing Authenticode signature.
resource |
---|
a942d6da75a0453d534fb8a6c1bc5e46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE