DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b3f6289fd0c505f461624f5953a0cb06_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3f6289fd0c505f461624f5953a0cb06_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b3f6289fd0c505f461624f5953a0cb06_JaffaCakes118
Size
69KB
MD5
b3f6289fd0c505f461624f5953a0cb06
SHA1
ca5d0aeea3520d2b32d5510c2a1bc84c3b07d387
SHA256
52ac4ec4bc699762c52c30cbb435e78ed505b2ecd558c3e69a152c31461deff6
SHA512
20c649692125998d1e83061ee9e4e3d218e54a783a7dec9b6d370b9395c146f531b52e6918b7100e934f34010ac1505e224ca0c607123078b3ce5a252fcb60d0
SSDEEP
1536:YaWuPK9JCTCiHCj/P++ePtEm7V1m29evV9IgAWt90cA:kuPKOTCtsEm229azIgAncA
Checks for missing Authenticode signature.
resource |
---|
b3f6289fd0c505f461624f5953a0cb06_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ