DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d16e4d161dcc0f0accecd540c90b145b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d16e4d161dcc0f0accecd540c90b145b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d16e4d161dcc0f0accecd540c90b145b_JaffaCakes118
Size
86KB
MD5
d16e4d161dcc0f0accecd540c90b145b
SHA1
7847dc26b84703dcd770b627fcd2920a4fea6037
SHA256
dbe43db91842d7cb4137d9e852eb5383749a98a50c981bc90e0f5aa12f58cb75
SHA512
77b962f2614ea11b9c2e0a00781e380be927d96fe2dc33ca09741031414c757630888df264638ad16272601af2ac98ffa1e7b77d7deb188a6e83edc89da268d7
SSDEEP
1536:iSk5XprMQdnOj35mF/UklDmulN9PqX8asz4rbaZo5lXoUn/Bn8xg5iWqUy/Hhrsi:Z2Xpo6OjJmF8klTl3PqX8aszUbt//B87
Checks for missing Authenticode signature.
resource |
---|
d16e4d161dcc0f0accecd540c90b145b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE