DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fbf1c21e725d2fbb5e591fe63972f03f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbf1c21e725d2fbb5e591fe63972f03f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fbf1c21e725d2fbb5e591fe63972f03f_JaffaCakes118
Size
50KB
MD5
fbf1c21e725d2fbb5e591fe63972f03f
SHA1
161ba2eba2a62e6f0215f47c396aad12722867f3
SHA256
cbbfee1d9b8942f026ff2a038d5445780a8b703114903090c0a8d24f94dbae67
SHA512
7e9e603322f60bffbb2aeb280e62083bdd900f7b424c5d0c8984762fe2ab1f897db0bddcaec39b92642ceb6444bd2e455ccdf2023bc8a1d5d165325976983a11
SSDEEP
768:d3olrUpfZxw8W0tZRX/XYPk9JA7a2aXnsa:Wl4pZxw8CCe22aXnsa
Checks for missing Authenticode signature.
resource |
---|
fbf1c21e725d2fbb5e591fe63972f03f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE