DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b02fcd039aaf0b71a1063fe9bb2ab944_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b02fcd039aaf0b71a1063fe9bb2ab944_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b02fcd039aaf0b71a1063fe9bb2ab944_JaffaCakes118
Size
89KB
MD5
b02fcd039aaf0b71a1063fe9bb2ab944
SHA1
eab0dbdc8d4dcbe66b379c58405005bb62e4151b
SHA256
20c52a7ec3ace8bff9ca19ffc958ef2954119a3557eb9f74f0fb8ebedebe78ad
SHA512
52f8509ac137daa2a6fd830d04b2958892d9f6211bc2b6ca384cf49bfe1a28e47c9bdf3bbaf107fcf9f6072b11169a5f0e19b5c098bcc81e6e5881bcef4a5713
SSDEEP
1536:/L0a8UuNTBXJjFqOLOFtf5HoBj27/ORQwdQgM6xY+ecNxYz:/Y3UulTjFqOL+5IY/ORX5MWf7Yz
Checks for missing Authenticode signature.
resource |
---|
b02fcd039aaf0b71a1063fe9bb2ab944_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE