DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif
Static task
static1
Behavioral task
behavioral1
Sample
187bb64d7792e876924f36a7a24de396_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
187bb64d7792e876924f36a7a24de396_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
187bb64d7792e876924f36a7a24de396_JaffaCakes118
Size
43KB
MD5
187bb64d7792e876924f36a7a24de396
SHA1
661e7079fa91c894005ea4f3a7d5c58aec17cd80
SHA256
b1562b0dbe0fa2162494f4f18d4dc44990ad8b05f4c579995b7cd0c405df4099
SHA512
4cc8d4865c2e06866a373ff5ebfce75356716ecab82d6293bb2bd4cf61aa1c649ea6432dfae6ed6f97ce0159f8271e0be70b3755059b63c9368972943e2f1e4a
SSDEEP
768:gCSqWQ1geCiG7LmIGWb7hiO5OpBlHsQnLhjacHEUuiyE6ppRx4qQM+:HSqWQGP7LmIGm7hiGOpBlHs0hjiUuxtO
Checks for missing Authenticode signature.
resource |
---|
187bb64d7792e876924f36a7a24de396_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ