DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
6821c77f9437c07d598b3a50aae51b53_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6821c77f9437c07d598b3a50aae51b53_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6821c77f9437c07d598b3a50aae51b53_JaffaCakes118
Size
137KB
MD5
6821c77f9437c07d598b3a50aae51b53
SHA1
c3ad46320605861b23977558c71c63457dcdb97e
SHA256
045cfe4f14dfe31e74bec1637d0e6c0e5e81a6531be5183620d75e2f0d095f6e
SHA512
845011535f8b6bec8bd8a49e798739d94a32ff6b8bd718dc465cce881f48f6a45ae6c217c2c2b2470ebadeabfb8d9cb6859dd17494e4e1e8acd33866c6bf2896
SSDEEP
3072:D/eaALYH5b++oeYfWE4sDQKJzWNgti7o4:ac5b3a3Jzugtv4
Checks for missing Authenticode signature.
resource |
---|
6821c77f9437c07d598b3a50aae51b53_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE