DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookCs
MgHookOp
Static task
static1
Behavioral task
behavioral1
Sample
f4baa7f3f68dfeab470d4b0bbc6133c6_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4baa7f3f68dfeab470d4b0bbc6133c6_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f4baa7f3f68dfeab470d4b0bbc6133c6_JaffaCakes118
Size
48KB
MD5
f4baa7f3f68dfeab470d4b0bbc6133c6
SHA1
e975db06598d2d8a370d52ca23bae091ba50f82c
SHA256
4a18fa31114d84bd07fb624ef86d7d05e0aa9a6ef9d18da491529815b9c8630c
SHA512
eddc6da95c92f7a4a5419dafa037d4cee01a67c330679cd8d7c62edbb5d4f6812032cc1d80e27264f4b092e120ac1cc999ec14d045e3de6330b7458e2fa6bded
SSDEEP
768:FmpM8V/5Q1GuorD6BwbdU4LF7iHCjMA4YbBYoQAUg2Pe/s5lxOHveuM:FajG6GeLF7iHCj/4Xg2m/OaeuM
Checks for missing Authenticode signature.
resource |
---|
f4baa7f3f68dfeab470d4b0bbc6133c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookCs
MgHookOp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ