DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
06a4f8dfcdc6a6f81c30e6e89daf06a8_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06a4f8dfcdc6a6f81c30e6e89daf06a8_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
06a4f8dfcdc6a6f81c30e6e89daf06a8_JaffaCakes118
Size
86KB
MD5
06a4f8dfcdc6a6f81c30e6e89daf06a8
SHA1
563fccfed7e2ec18f3581716e5efbc79beec031e
SHA256
f8b497db85ab75719affe13b74baffd26b1eab43f568e20de73dcbf6b85c8b53
SHA512
5b907cda8e84ac662ee51c5a519eb98f73a9e269b11ae4909149ce8bebb0b390a6b1599d187b370f2b8720c33815edcf61bc0ea29851b12b124c026c87d6b500
SSDEEP
1536:1niwzkU61VC+7lWbscIJJGfNgwmca1ziuVTGHSkKOpUaQOG9OqV1QTs9nmTWbP:1iwzk/1zsbsrJON83rVYKOpNtGQwQAp3
Checks for missing Authenticode signature.
resource |
---|
06a4f8dfcdc6a6f81c30e6e89daf06a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE