DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f0ce9a5a0b50eb1fa4026d167518801d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f0ce9a5a0b50eb1fa4026d167518801d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f0ce9a5a0b50eb1fa4026d167518801d_JaffaCakes118
Size
88KB
MD5
f0ce9a5a0b50eb1fa4026d167518801d
SHA1
b2b82a7e50fb27016b541b7c7044e7b08443a742
SHA256
1f0e36c6d89d2f7de9a2a762173a71983de54816b4ffecbabeed346a478a77b1
SHA512
0050303b55b3cd6555698132852fdbab29b1a652f75fd3dc2fb48ea40210fe042fb07decc323bf68fbe2167c95121d274c5d5b1870b61d93caf01cfa3fa45127
SSDEEP
1536:xyGxzlYKS1q6T2Jd/itCThNzONeOPrZjDVpVsjXDWz3H44wq872UYVyw1dXent9N:xnXYzHu/iGiNeOzQjXD0XRcvsyYdX6tv
Checks for missing Authenticode signature.
resource |
---|
f0ce9a5a0b50eb1fa4026d167518801d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE