DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ddfc9dbe4eea8c05b00c3dd65b85e961_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddfc9dbe4eea8c05b00c3dd65b85e961_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ddfc9dbe4eea8c05b00c3dd65b85e961_JaffaCakes118
Size
89KB
MD5
ddfc9dbe4eea8c05b00c3dd65b85e961
SHA1
31a4acfef5159927207c7f621044d04aaa3ffcf3
SHA256
dea3b632a95b78723c720735248c2ea71cc3446e31ef59b34a4c044a760549be
SHA512
63c64cb13a3eeb74c48321041b7642282a38671b14dd7742e40a58be37aafc9829e1c7dd1622089a5750b35f53e2a5b1d121d5c79e9b16597bdbcb014183a800
SSDEEP
1536:BtNt5w5O/W/BFyQChQI9Mc6KEscRU8o37hi6MSOahHq+FB8YCS8uknL0WutPy4uN:BtNt5w5O/ABYVdKKEscRqo6xOcxCSeEs
Checks for missing Authenticode signature.
resource |
---|
ddfc9dbe4eea8c05b00c3dd65b85e961_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE