DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
23f88744eca84a530440e3a7b2da6b4c_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
23f88744eca84a530440e3a7b2da6b4c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23f88744eca84a530440e3a7b2da6b4c_JaffaCakes118
Size
50KB
MD5
23f88744eca84a530440e3a7b2da6b4c
SHA1
38232dd84eed78c69c73ba95612e61d789a41cfb
SHA256
2906b3d10810d0a4993ba7a86e9c9297930c7fcb8e7a7bb7acbd3843a82e0c80
SHA512
2106b20b582e24516e2f3032398e304fd18154f1084b4763d1eaf759d1b5e20c1d3b0dcb6ff13af01580745cbe8204a0d7316ac884df6cb4e2c5634f3ccc9155
SSDEEP
768:ZSLMqQqPMQFeorG3RTyYZeOJAbpHowZfBbVBpZJGB10FHRdHpnFqQc2rWs23Kk:wLMqdPMQ/i3/ZYbPZbjpxxvqVOWsPk
Checks for missing Authenticode signature.
resource |
---|
23f88744eca84a530440e3a7b2da6b4c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ