DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif
Static task
static1
Behavioral task
behavioral1
Sample
0382e18eede87d9927061e11adb8113b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0382e18eede87d9927061e11adb8113b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0382e18eede87d9927061e11adb8113b_JaffaCakes118
Size
47KB
MD5
0382e18eede87d9927061e11adb8113b
SHA1
c343f0818b344d7ee5deff2a735c3281de22250a
SHA256
6539debc84921f2a45cd2c38627eed816a685bc0f5d544e9de17cb3aa2ce26a0
SHA512
e94b65e2c6b6a1d87a55bfac0325510dd7fcdca93e1282dab1b490a8a5d9fc8b8d5ef87484ecc43fc5fe8238cc14fae28f3c99821d8196e3d36322814f550462
SSDEEP
768:aSVMqQCVaQkUwjWno4SJiO5OpBlgOtvYm/pIUCpGyWz7sReLNOsn4xOH7QL3PE:tVMqFVaQbPkiGOpBlgOLpIUColwRe5OU
Checks for missing Authenticode signature.
resource |
---|
0382e18eede87d9927061e11adb8113b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ