DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn
Static task
static1
Behavioral task
behavioral1
Sample
f6c0cd65dada2d43d2a0eaf7b3ad22bc_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6c0cd65dada2d43d2a0eaf7b3ad22bc_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f6c0cd65dada2d43d2a0eaf7b3ad22bc_JaffaCakes118
Size
46KB
MD5
f6c0cd65dada2d43d2a0eaf7b3ad22bc
SHA1
72235de38b8f4711f858fd719bc31c104fb7e2bb
SHA256
81d6e81c072dc62c7674d17adf16fb208b668ec4eec779ff4569172b61890124
SHA512
fe6e0429746a05b4446e68b100b29552937a66cc6e851ad7a53cac3da5f82d7ede0f3cf7b76615f643f768f7c5866eef8712e1f8012046db1c04aa125ef2b40d
SSDEEP
768:5mpM8VB5IRtRHZQFJbq68GLiHCjMAZ/r7jVsUm4L1u89+Xfx4q9sypxzA:5ajy5QbqSLiHCj/Z3emL79+X5RnpxzA
Checks for missing Authenticode signature.
resource |
---|
f6c0cd65dada2d43d2a0eaf7b3ad22bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ