DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f06b677908eba54e487552b19e783b45_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f06b677908eba54e487552b19e783b45_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f06b677908eba54e487552b19e783b45_JaffaCakes118
Size
90KB
MD5
f06b677908eba54e487552b19e783b45
SHA1
e55b41585648f54136886415746b71f511d71950
SHA256
6ff62659a116bd6c1a659c8dbd213a855ce68bbfa59731c061bde4a67202833e
SHA512
5ffb290e8fef9e4664618ca4b3c864e21d03433d59df8cafaf7b39c88e9d01eefc0ac202ea0c5a3d1f0054465613cc119f8e909bdce1b38aacc12b32d01ef935
SSDEEP
1536:C2aFNoCssK8EUsbuDeKZsFfwKrweAHZPYhhrP+W4+Q5zrCgLrdiqmoJKZF:C2ar3ss/eKuafRZPEtP54+CrrrdjJK3
Checks for missing Authenticode signature.
resource |
---|
f06b677908eba54e487552b19e783b45_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE