DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
038fa9b1a072cf372c29464e19873a38_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
038fa9b1a072cf372c29464e19873a38_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
038fa9b1a072cf372c29464e19873a38_JaffaCakes118
Size
35KB
MD5
038fa9b1a072cf372c29464e19873a38
SHA1
f0bb03d4be8dfe021f38a5766fa781bc02e1b0bc
SHA256
872acbaed8e0499e9fa9a6a19be4c7fcbdda89460c59583986bb4ef4b5db6502
SHA512
64132bdec9df6191520b1bf5b2a95db5617bf5e29007c2ba6e1be78c9cb93b1f2d16cad9dfe12b2e53827287b0e7f8aa6e686d2b9bda86cc60ba023d91a7f3dc
SSDEEP
768:0oiSqZOIQevmCLvBFH7Z0H09lRUY6kddWgMyc3H9:0vSqZpQizzd0H09p6ykyS9
Checks for missing Authenticode signature.
resource |
---|
038fa9b1a072cf372c29464e19873a38_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ