DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0e26caaab07eececd7873804b957e62c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e26caaab07eececd7873804b957e62c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0e26caaab07eececd7873804b957e62c_JaffaCakes118
Size
34KB
MD5
0e26caaab07eececd7873804b957e62c
SHA1
9122e4e6e55c43b1c7dd81705f9c6c7fb0f49568
SHA256
7fdf9ca37b78c6852339e6309b1aea7a2190ca83c07c77f6b082f287c20d1328
SHA512
52dea38d34914c8e0cc770dff89a41ab56a0dee7d6399ef344ee2c2854ce61b6e07a069eba91db45d639471f296b963fd75c82518596a86848b9807a348e6ac4
SSDEEP
768:LSACC8pTkwAyWD4wX67SKlVvH7db+zLYfd1gbF13ix:LSACupsHXVjdb+zLY1Gwx
Checks for missing Authenticode signature.
resource |
---|
0e26caaab07eececd7873804b957e62c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ