DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
069b3249b3667609a2057259dadc4308_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
069b3249b3667609a2057259dadc4308_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
069b3249b3667609a2057259dadc4308_JaffaCakes118
Size
30KB
MD5
069b3249b3667609a2057259dadc4308
SHA1
f076a72b2b0069dd73e6c86e5ac507fa834e7b41
SHA256
3bff2cd4021bd6816ad9623248f0b09fde4d04a5bef73e343d002b764111e518
SHA512
83b8e52b987fc496f98f7540ad888dadeae470b3c3a588f9ecc7f0be3612e26af64d418fb35e6e7cad9a5ab974b3ef0b9218eefe9fea035257ff231b2559efe3
SSDEEP
768:AKSyqu0G0GQDcq0rtx6iXEW9qZYT0fV5ud7PvWx/0:Ayqu0G0GQRotxREW9qPfV5W00
Checks for missing Authenticode signature.
resource |
---|
069b3249b3667609a2057259dadc4308_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ