DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c0bd34badc5726333f06255c4ea8ba37_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c0bd34badc5726333f06255c4ea8ba37_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c0bd34badc5726333f06255c4ea8ba37_JaffaCakes118
Size
82KB
MD5
c0bd34badc5726333f06255c4ea8ba37
SHA1
6879c305bd9d9c3567bfadf5563e33366966bdb4
SHA256
5147e1008fe75523511adce9e3dd64763dc4944b4960990d01828fed863524f6
SHA512
0a1e510285999864998815d7c26a1ba2f118a81bccedb4c3c149ef73559bd3cb98377fe2f25ee5110fe7f443cf1bbd5ff20fc30740fc5963dd36b85c4da5fb58
SSDEEP
1536:P7nbxXUrmTakO+j77ik+tXdDppi4aGl0AS48zYpPKTkFETAYj7Y:f5VOw6T9tlrStKik
Checks for missing Authenticode signature.
resource |
---|
c0bd34badc5726333f06255c4ea8ba37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE