DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2d3b4a73ed5ad7400ccdd3c18da48dcb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d3b4a73ed5ad7400ccdd3c18da48dcb_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d3b4a73ed5ad7400ccdd3c18da48dcb_JaffaCakes118
Size
35KB
MD5
2d3b4a73ed5ad7400ccdd3c18da48dcb
SHA1
e5e829bd9cd423b2b988e3a5578d96e519f19d9c
SHA256
73097bf81fa5402595170971863b77b9470f888f029a54fa0e309652a5a36778
SHA512
969e587e011860df3087526509844a0fe773129871eb2538fafbae6da45bfe42ba2fdfaa836376f3a40134e02040721e6f8aaf18f642e12da91ef3169e1a2a0f
SSDEEP
768:bSACC8pTkwAyWD4wF3IM+6vFNJk6Sw4dWQ71B1T3+:bSACupsM3V+65k6SrZq
Checks for missing Authenticode signature.
resource |
---|
2d3b4a73ed5ad7400ccdd3c18da48dcb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ