DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
db8d2c77da52b2837389340e24a2e978_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db8d2c77da52b2837389340e24a2e978_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db8d2c77da52b2837389340e24a2e978_JaffaCakes118
Size
88KB
MD5
db8d2c77da52b2837389340e24a2e978
SHA1
58f8b7a6140c32059a11fe8667f0c0fd76d40316
SHA256
bc5a879dd5d0f3e84b1e246b921e6676bdb559d0f43032bd145ec68f1d40af1f
SHA512
05261cbd20315264aa37a9e9a001768a010674331489d7e65fe90283ebe01e1a5adff7a8ff170ba8d27344199f09cc03ac3dc2eea494775b7647f967db6b7865
SSDEEP
1536:b8rK/HqAHRCcQmBHXo+9wIsRtRUpOj/z7heHAaOEjVdirJitTJ9o+Y:b8qqAHR4mVYt3tRUw/qAaO6diViG9
Checks for missing Authenticode signature.
resource |
---|
db8d2c77da52b2837389340e24a2e978_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE