DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookOf
HookOn
Static task
static1
Behavioral task
behavioral1
Sample
2d8f368c1b5a3ec952d7da496fd48a3c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d8f368c1b5a3ec952d7da496fd48a3c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d8f368c1b5a3ec952d7da496fd48a3c_JaffaCakes118
Size
25KB
MD5
2d8f368c1b5a3ec952d7da496fd48a3c
SHA1
ea119befd3f7661299bc019983a0dbd929ff0e2f
SHA256
3c0978275dd7c965146ec6ba59c9c60e68f3aa96257275bbf50f0b94484fb1bd
SHA512
0b3854c1fd7611ca5fb74e4e02a712a746c37f07dab29f80e43725e373586b28a5f36ac157b87ddd0f5ff789d873bef76510aecd065fdc947481962114fa2035
SSDEEP
384:0jcxz0CKAoqd+13XQaxtu4IZcS/SzbuLe3bWMet7ZXaz9r+fBAzrqhQjKY3wd/:Q5CKBqdSHQWYXPSzgeLXW8R+mrqhswd/
Checks for missing Authenticode signature.
resource |
---|
2d8f368c1b5a3ec952d7da496fd48a3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookOf
HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ