DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
036c1cd969804a2ae9c46603a36ab56d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
036c1cd969804a2ae9c46603a36ab56d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
036c1cd969804a2ae9c46603a36ab56d_JaffaCakes118
Size
25KB
MD5
036c1cd969804a2ae9c46603a36ab56d
SHA1
2ccfff906f697eb957b13b1f7d7d58c556881925
SHA256
ce709d540991412827a5c234c690eca2db922b7f28d309ed4d41834b177f01cc
SHA512
02013f813b7f82b4c2f9794be90372ad237744e8774133481c4161afa5c790db3af8ef18c0371a822acb1e0ae4b61ee3ef88e3df8ccc6883c0dc530191647979
SSDEEP
768:yp2wFdtDUdr4wnLOOHFnbqDQzXTA/Ia5u9bZ:yp2SuNXqAtUsDEIa5QZ
Checks for missing Authenticode signature.
resource |
---|
036c1cd969804a2ae9c46603a36ab56d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE