DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
dd46b22c1111d1290c6c6b98c7fec908_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd46b22c1111d1290c6c6b98c7fec908_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd46b22c1111d1290c6c6b98c7fec908_JaffaCakes118
Size
158KB
MD5
dd46b22c1111d1290c6c6b98c7fec908
SHA1
25cc88624898c7da4579ea5c34b4a94f487eb335
SHA256
747dda4e43f715f638fd235423ecd01eacda066f90377418c3d0afabfb65a594
SHA512
ffbd14e1f1b2e3e3a0258c255204a4f9e310f600098dff0dd724521746bfab366ffcb5fc3f58f3d68323d861a9bbbb69d74e36083346d754915d2524c6569ad7
SSDEEP
3072:6nHU5DEGPNRwwlBcQFszUbt//B8xd9ogqB:u4EQH/jaa//B6C5
Checks for missing Authenticode signature.
resource |
---|
dd46b22c1111d1290c6c6b98c7fec908_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE