DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f04b838abf870ab641c5b6e44d86adac_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f04b838abf870ab641c5b6e44d86adac_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f04b838abf870ab641c5b6e44d86adac_JaffaCakes118
Size
89KB
MD5
f04b838abf870ab641c5b6e44d86adac
SHA1
08f431669a1058a488bb9c48da99fed291b286ed
SHA256
40160237818772588badcab97197255158d9774702f0dc0f4b658399e4bbc6d5
SHA512
2e12b8356d7256149e6823b31e2f0daccf8e67fd67536ce732aa2cde0ef0cd514f373dcd4b111e52586a494da50e326b7cc32560c6bcb67339a1eef2d1d10795
SSDEEP
1536:ut8X5D/OwhNbqRCfef4PHFYkZnItDFvdM8Sr79hIGY2QsiiZYFEUJnXxevo6OKUE:uuXF/xb2ck4NYnrvZMhInRsHMJnXxqHd
Checks for missing Authenticode signature.
resource |
---|
f04b838abf870ab641c5b6e44d86adac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE