DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b6a39eb3069126bce92414f196b74a6d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6a39eb3069126bce92414f196b74a6d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b6a39eb3069126bce92414f196b74a6d_JaffaCakes118
Size
154KB
MD5
b6a39eb3069126bce92414f196b74a6d
SHA1
a6149f8b50b49f60d3ba9cb21d7c2f363a41df76
SHA256
52250d6ad330983cc2c16e140e0b00aad9601867a585f186f91f40ba76cd03a6
SHA512
4bc77f9a30f62a1bd8c97c70e17a58749041fd88d31fef4e536747d963b49eb38af75718c2bb9d3a594180e42744bd06fbd2b07c36b2d12c593dfb529a3bf237
SSDEEP
1536:dnM2eBePud42w+hBN+VuDTG8O5PmbGa3+oh4AzoDoFXTBoeQGw:dFaePt2wIH+Vz8QPMOAzo03fw
Checks for missing Authenticode signature.
resource |
---|
b6a39eb3069126bce92414f196b74a6d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE