DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
afeba0ff4b6029fe64b0f89f4761b7d8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
afeba0ff4b6029fe64b0f89f4761b7d8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
afeba0ff4b6029fe64b0f89f4761b7d8_JaffaCakes118
Size
83KB
MD5
afeba0ff4b6029fe64b0f89f4761b7d8
SHA1
9fdd3e86ff968d8fb04e0ca9d79491330b80d968
SHA256
e230ff8b3b70afe2270c6d61216fa58744ec16007dc23072e2d2bd2a6905cd44
SHA512
449a7faf3d006e2f598628e89c2b208a4c993ddf709c081560027403ad0a3d4bd1cd8232a86836816fba8da52ac989c390fcab8411b78a11f731d7a58a3c6d29
SSDEEP
1536:oqQPboM5i/qUb/EKWDoi+VrPlV1catS0qS+wlRyiW9rZQBwW/EKf:EbV5WqUbEejVLn19tj7+wX5mrZQBNE2
Checks for missing Authenticode signature.
resource |
---|
afeba0ff4b6029fe64b0f89f4761b7d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE