DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b06dfe03621950272ccb787f01f71ba5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b06dfe03621950272ccb787f01f71ba5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b06dfe03621950272ccb787f01f71ba5_JaffaCakes118
Size
21KB
MD5
b06dfe03621950272ccb787f01f71ba5
SHA1
df60cc4d9fdee040a273c5704d9050d793057a6e
SHA256
851797783661945d7124a5b9e02ac89aa21a14b47bbebabab5d925d34d8771af
SHA512
3eda75d825e08ea7ea6d62540fe28c2a5ce1f6a22fb3808b8d92806b9833e451f6eac862cf6c4b10c9045ecbba16eb30dc033c27d0b4240a25d24870cf7d37ac
SSDEEP
384:ZJsjhFpT6pXUN7Q0GJXst06JbcFLQyE3g0M/qTBFZU2T4gaTaEB4Mh2r1:Z6gpmmsWMiBoYqTBXd4gaTaEB4O2Z
Checks for missing Authenticode signature.
resource |
---|
b06dfe03621950272ccb787f01f71ba5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE