DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
Static task
static1
Behavioral task
behavioral1
Sample
fcde9a2cda357683727b0670ccf5f991_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fcde9a2cda357683727b0670ccf5f991_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fcde9a2cda357683727b0670ccf5f991_JaffaCakes118
Size
31KB
MD5
fcde9a2cda357683727b0670ccf5f991
SHA1
198828abea1b26b890f2f4fcb35d10779a9f9071
SHA256
9ed44b6dce584a619b6e3d2b924d1cdcaa5ac9895374e991c5cf60296ac5d898
SHA512
92e9054b92c2d1817c5ca64605015eee8599ce05ff77b5aa22f6502c85a3ab38d02be336793681156b23470448e3abf72fa777fbfcbbbf798523d5bec6aa67bd
SSDEEP
768:iKSqquxD0GQjgRJMegGMnjfEysX9xVhVdhjEiuG:mqquxD0GQSPVCwX9D9Ct
Checks for missing Authenticode signature.
resource |
---|
fcde9a2cda357683727b0670ccf5f991_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ