DllCanUNloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b82a4d06a20c6dea795af5ce28bf6410_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b82a4d06a20c6dea795af5ce28bf6410_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b82a4d06a20c6dea795af5ce28bf6410_JaffaCakes118
Size
78KB
MD5
b82a4d06a20c6dea795af5ce28bf6410
SHA1
bc5efef1b72cd7bbe0c36decd1db02e8965f2020
SHA256
446675f6eae62952f0017480d5b0d8d0e8ae88221fb3468b513abf5c3e076ecf
SHA512
a1ed13d6b51019bae952d66e97fabf8e5dc2ff40fb3150da7f02a571ace0542e150016eb15f49ddedc8c58e402284f8c2006544761c06983caf4cdb990c5a930
SSDEEP
1536:LU0ElRtglAk2y5B3LrHIpy6R27RhvMu6+ASHiRiVPgBE7OkB:LU0ElUlzB7rT6RoRdMN+7HBPZ75B
Checks for missing Authenticode signature.
resource |
---|
b82a4d06a20c6dea795af5ce28bf6410_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUNloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE