ClseHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenHook
Static task
static1
Behavioral task
behavioral1
Sample
27953a9b9b2daf0637511caffdc596e7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27953a9b9b2daf0637511caffdc596e7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27953a9b9b2daf0637511caffdc596e7_JaffaCakes118
Size
31KB
MD5
27953a9b9b2daf0637511caffdc596e7
SHA1
7f2078600871222273b49dc1f3c552611adf6739
SHA256
2eb485784d31723046a1cc3571155a5d3c6112f7457b906cf23c3201984a3c91
SHA512
885aeff55ce0fd9bb74a5f3e3c26dc149e71dfdda4d88d7314b7d1e680f2189e1e30d0d7be2157a1d192cd91cc9788a1e81bb45f42744deae6c974775e6eee4d
SSDEEP
768:cLM8JjlVmnpNqRW+UjNcU3vbgdad1PlcC:cLnjlVmHDj1yG7z
Checks for missing Authenticode signature.
resource |
---|
27953a9b9b2daf0637511caffdc596e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ClseHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ