DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
12e9f4bf69a70968adf98051158fc54b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12e9f4bf69a70968adf98051158fc54b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
12e9f4bf69a70968adf98051158fc54b_JaffaCakes118
Size
34KB
MD5
12e9f4bf69a70968adf98051158fc54b
SHA1
cb9c523d46ea4b2a333c65bb597b9afd2e820f4e
SHA256
c17f3e56c60f4481de1ddadc72ef636b1d15faf1cd705ed6e54bbc3a845f7281
SHA512
357df303e51b67e71e1f3bb7ebc0a2df9cb8e7269492db4e503564ce873a44519a1c129def420e11bc960dc52619c77fd842daec0cdb772da30d86552d64816b
SSDEEP
768:qoiiqZOHZQhnSPSvBD5xaNgwp1+nLery9tCUycKtvY9sIY:qviqZiZQhA03aNgwiLwwtCZvIY
Checks for missing Authenticode signature.
resource |
---|
12e9f4bf69a70968adf98051158fc54b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ