DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
Static task
static1
Behavioral task
behavioral1
Sample
083c81d548a8f30ef002163507d4d0af_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
083c81d548a8f30ef002163507d4d0af_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
083c81d548a8f30ef002163507d4d0af_JaffaCakes118
Size
30KB
MD5
083c81d548a8f30ef002163507d4d0af
SHA1
0299b584cdf373e54a3cd07078c18fee6bac3b6c
SHA256
a5fa0b44c63d199a2ad56bfdac63d859946da35f7d62995bac0f31506e6cf495
SHA512
1982e4d72f1991f779d033398c9256df25b97a59ec04658dd641f40524fad3069a2fbc19979a0466f7b6871d589e5aa71478d1fac1d44f552827af6326f4d31f
SSDEEP
768:aKSqquxD0GQjgRJMeLuKCpektNtVVRdhjMiar:uqquxD0GQSPLuKCtRyD
Checks for missing Authenticode signature.
resource |
---|
083c81d548a8f30ef002163507d4d0af_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ