DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0db9143951b3dbd01eefd0428d7d56ce_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0db9143951b3dbd01eefd0428d7d56ce_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0db9143951b3dbd01eefd0428d7d56ce_JaffaCakes118
Size
21KB
MD5
0db9143951b3dbd01eefd0428d7d56ce
SHA1
73c8e29533c13408a3a9ae78d53f144b889247e0
SHA256
e119d04b4cf31bfecee663356b7b8b69e8cb128bb55cb652882617a49629b7cd
SHA512
991041d52baca16855d94b151a3fae37dfebe16a0a3771971ca04575acba35cf7837f7167d8941634ed28a0e7a34f20b5d28f2570078aa65b4cc15e3655b01ec
SSDEEP
384:J9RdCyPMqlW4mQm6NPoTkEFRrGxo0l5SIzAztuCi62E:DCykql9mQRFuAxv5AtuX
Checks for missing Authenticode signature.
resource |
---|
0db9143951b3dbd01eefd0428d7d56ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ