DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0db439f02ad196fc52098f3872a002a0_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0db439f02ad196fc52098f3872a002a0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0db439f02ad196fc52098f3872a002a0_JaffaCakes118
Size
27KB
MD5
0db439f02ad196fc52098f3872a002a0
SHA1
7a77421e1c066f8ff445bcd635865f55e2d1f7cb
SHA256
b65a55664a7bde7a7895e57f81202bbf59e1d7533b287674567d80e02ed955b3
SHA512
40b427847298d63fb0c7a8c2320e0d4b85e96442bba45e7074b878dbd39c25aebaaa0f9995ba207f3a1d008e8640a3c7cc6b41ed7393121e874bb0003f22aa9b
SSDEEP
384:FEc46GOuLUfl1hXTL+8H/ZhiP6v5hoX+RwrQ7FtHLRn6RuR2QsJ18KQIl9yzCelH:2cPeUflvjRhe+KNrY9n68OHnf2Ndr+XU
Checks for missing Authenticode signature.
resource |
---|
0db439f02ad196fc52098f3872a002a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE