DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ba9d7b6425f8b30fa7b6d9e7d8f440a0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ba9d7b6425f8b30fa7b6d9e7d8f440a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ba9d7b6425f8b30fa7b6d9e7d8f440a0_JaffaCakes118
Size
91KB
MD5
ba9d7b6425f8b30fa7b6d9e7d8f440a0
SHA1
32a814ed455a1580670f55b8008d6674120811d9
SHA256
ed8009f5b8e8b195a052f20762ebbf10c74c3818dc84acc273e1e480fc479288
SHA512
0b28dcbbdb44a94121b5015f016b74de7bff8776fc27be3d532e73a7826a06a19749e8ae88680c3093fc06ebbc623b244e934981393b7e0387abc01d720f6893
SSDEEP
1536:/8Ju2Qbmj9YnzSMwuZF2JtfWvrFBd2Eq3mYlfzKMQzbbW8petuywVU3FjSB:/882+H+YF2OJBd2RFlbKMQfbqhw0sB
Checks for missing Authenticode signature.
resource |
---|
ba9d7b6425f8b30fa7b6d9e7d8f440a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE