ClseHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenHook
Static task
static1
Behavioral task
behavioral1
Sample
1735202a185d26bf87be90fc7265ff6b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1735202a185d26bf87be90fc7265ff6b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1735202a185d26bf87be90fc7265ff6b_JaffaCakes118
Size
31KB
MD5
1735202a185d26bf87be90fc7265ff6b
SHA1
0db5d72cd5169a9627fa3e86b521d866dd00dbbb
SHA256
ffdeb4c599256ae84c99f0bac5c405a43dffd4f9aa19279c7c4b37a17b1862d3
SHA512
5a51bf686b1a4772f7f6e318c3fe7be952cfdac1db028babbb5687289d946cc826a70e073dd43ffa5925688fe006710003c099bd94d680b99d0bba442af79790
SSDEEP
768:gLM8JjlVmnpNqRW+UvtP70PRloHdhP1F+:gLnjlVmHDvil0LE
Checks for missing Authenticode signature.
resource |
---|
1735202a185d26bf87be90fc7265ff6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ClseHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ