DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif
Static task
static1
Behavioral task
behavioral1
Sample
0dcda93434a94ea8ff2f12cd074ede54_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dcda93434a94ea8ff2f12cd074ede54_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0dcda93434a94ea8ff2f12cd074ede54_JaffaCakes118
Size
43KB
MD5
0dcda93434a94ea8ff2f12cd074ede54
SHA1
325b92ce5d80a3bd19355f727e508691a91134b0
SHA256
f32b5e93fbdac1f40c90747ff21c076c54287f7b5d81bb3449afaa97157f4e30
SHA512
52b5a0c052e31315d703bcbfe31f4536cf3123368d9b67582cad2a7ed7fb5eb348bd7f6035c29d0145f827ddb63df8fb62beeb9d95c742e03c6a4d0088ffab27
SSDEEP
768:ECSqWQ1geCiG7LKKqXiO5OpBlnw+3fyZh8u2OPqF+nzCx4qL+N:zSqWQGP7LKKqXiGOpBlnwnZjDyF+nmuN
Checks for missing Authenticode signature.
resource |
---|
0dcda93434a94ea8ff2f12cd074ede54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ