CKGetPluginInfo
CKGetPluginInfoCount
RegisterBehaviorDeclarations
Static task
static1
Behavioral task
behavioral1
Sample
f56b84a4b286088bafb5ec58247f7201_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f56b84a4b286088bafb5ec58247f7201_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f56b84a4b286088bafb5ec58247f7201_JaffaCakes118
Size
318KB
MD5
f56b84a4b286088bafb5ec58247f7201
SHA1
5875308a9bef0a49d91ba68d35909c100c9c8049
SHA256
2e9f7cb60407c46d9417199bff1d6d5d13c5d5b2adf500750415cb2901b074ea
SHA512
a7b146930b2af6d0e6e3f25a30798282c63fd48af114af3eab6c65068576a187e4e479643f522e785c614360340a088d0148cbc5cf874a33a447a473d28b0176
SSDEEP
6144:WXzwSgZV37iMbkQvM5un8/8grAxh8DzEDOB3Q5ksxFRl:dZh2MRUg3TxhuaO3Q5BfRl
Checks for missing Authenticode signature.
resource |
---|
f56b84a4b286088bafb5ec58247f7201_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CKGetPluginInfo
CKGetPluginInfoCount
RegisterBehaviorDeclarations
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE