DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ff26b2e9378460ef8d82272be062e2f7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff26b2e9378460ef8d82272be062e2f7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ff26b2e9378460ef8d82272be062e2f7_JaffaCakes118
Size
140KB
MD5
ff26b2e9378460ef8d82272be062e2f7
SHA1
d8dd794bb72b54b8268673af56c79f6b8b465d29
SHA256
2bd6acd84556b57473f92e168a4fa1847f7e8c54d3464886a5f6933b635e580e
SHA512
4f2ff2f5cc47fe41c8cfea3e8d3e890063951ef6e7d2451ab2d48a6144829ab3c08ad9b1049a63e8950fb05cc047965419323b43df331950349072712bee46f6
SSDEEP
1536:swjWQwgGty0NPf8zbo5rA7rxu7XrJzpMAs3mAXmayuMFAohI/cH:sISty0NPUnoFA7Fu9an3mAXTyuGj
Checks for missing Authenticode signature.
resource |
---|
ff26b2e9378460ef8d82272be062e2f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE