DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c232644214d86174470cecf1cb3cbd4f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c232644214d86174470cecf1cb3cbd4f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c232644214d86174470cecf1cb3cbd4f_JaffaCakes118
Size
158KB
MD5
c232644214d86174470cecf1cb3cbd4f
SHA1
8e90cb7c1e2225a3dec7a6fe1c566ddbb4a2dcfb
SHA256
bd9f1aa7512b9ab71f3a670c65fcc2f70de2f97439ceb8d11e5c3da11d67560c
SHA512
48975c0a7857a122d3d1425952890bd9133ea31b36c53e04a15c10181dad05ddac1f3d7e4dabd928f12c065c12033e06fae3e26bc277ade24646c0bdeff7b50d
SSDEEP
1536:r3sUsSeix//XVSoEFqBJsz4rbaZo5lXoUn/Bn8xg5iWqUzSSYPPFDBO:rcUsDg/LEFqBJszUbt//B8xd9wwlD
Checks for missing Authenticode signature.
resource |
---|
c232644214d86174470cecf1cb3cbd4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE