DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6167c31c3c7f4a67134f6a951eb2704a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6167c31c3c7f4a67134f6a951eb2704a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6167c31c3c7f4a67134f6a951eb2704a_JaffaCakes118
Size
140KB
MD5
6167c31c3c7f4a67134f6a951eb2704a
SHA1
b80e4d74f3bc528c387e7866abac50fefd0bf513
SHA256
470ad98e2b2dcdd808297620aca8bbc65185e716504516c5e147850e90c581c9
SHA512
2cd862620f071849cc77bd0240db4333860aef8cb86940277310296c563cb568c19dda68f30df7d48a7b7e8e88a6309085ddb09d0a37a01815247294a74c9f00
SSDEEP
1536:Y/JWTgGiW1mRGIfU6PjVciUvbCPJhhmOuNSXTMs5:NTFSGIfUs04htbXo
Checks for missing Authenticode signature.
resource |
---|
6167c31c3c7f4a67134f6a951eb2704a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE