DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
868661f31902a939803a8754a08a479f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
868661f31902a939803a8754a08a479f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
868661f31902a939803a8754a08a479f_JaffaCakes118
Size
34KB
MD5
868661f31902a939803a8754a08a479f
SHA1
e8bdb28ddf35898d8e129a2144de3e4c4e8c49c9
SHA256
64abcfaa6afdb4f5791862e8ba88da942ac03b1c029aca8c42c2443c6c10d34c
SHA512
320e627a0c830d64293ab4836d54c27bb4dcf5fa732c712f11c3c31c676829aad2808dc91b835584a26af293d0c1272eaf655117507c1fa3fb94dc0796c855ea
SSDEEP
768:pcoi6qZOmQcTpJC6A74d6ym4ONWFsAKX2t1dKwU7zJW:pcv6qZ7Q2oEde1Wu2tbmY
Checks for missing Authenticode signature.
resource |
---|
868661f31902a939803a8754a08a479f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ