DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookCl
HookOn
Static task
static1
Behavioral task
behavioral1
Sample
02449fbc2fd72ecaf7f37c373dad3a1b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02449fbc2fd72ecaf7f37c373dad3a1b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
02449fbc2fd72ecaf7f37c373dad3a1b_JaffaCakes118
Size
27KB
MD5
02449fbc2fd72ecaf7f37c373dad3a1b
SHA1
2aebab71300c36c3c0471467d559c2b4789165a3
SHA256
d1bb1078be69dc32e761e3266e9a3a6be5d37ee74e9ce6b03a3faaec0a2bd04d
SHA512
de93d504c63209f8ee05c8afccea3d26c1c2fa8ed6896601be87853a8c2d43da2b44812d2480b0e2621a9c409d430e7a43f34422202bc74805ce36e0e8ba551c
SSDEEP
768:lKSCquFw0GQy+7R4f3dgikU9WLygdj/2Yen:/CquFw0GQBSfdbvAL7yxn
Checks for missing Authenticode signature.
resource |
---|
02449fbc2fd72ecaf7f37c373dad3a1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookCl
HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ