DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b2a8471686eb3a4422bad1e496c9b99e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2a8471686eb3a4422bad1e496c9b99e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b2a8471686eb3a4422bad1e496c9b99e_JaffaCakes118
Size
87KB
MD5
b2a8471686eb3a4422bad1e496c9b99e
SHA1
d2a36d7b3c09c49aa5b23fe75e5183caf48fd212
SHA256
39bb53b56c8a774fb7aa883b56d9e393e1950024d6f80d1ba4e22029975439f6
SHA512
5efc7d5982c9b4c56d5a43e71132e3ce6f053d4c60ad6df361cd4f8335ddb8a442a5b35c665f4feb964c95bed8da8aa6a0b39bcceda8db2579427c1ea8168d11
SSDEEP
1536:ZeNYbzESpKMrAcNUDElSQUtLrv+OR4JYvaURBF9/8PXkBLlXjl59CmUiLKxiVAU:ZeeeMrxNUIkrlz+ISURBF9/ec5j3LUiv
Checks for missing Authenticode signature.
resource |
---|
b2a8471686eb3a4422bad1e496c9b99e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE