DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif
Static task
static1
Behavioral task
behavioral1
Sample
37c4f1e97467385089bc9eda1e37fd75_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37c4f1e97467385089bc9eda1e37fd75_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37c4f1e97467385089bc9eda1e37fd75_JaffaCakes118
Size
43KB
MD5
37c4f1e97467385089bc9eda1e37fd75
SHA1
6268d7d3d06ef5b7d04291631e983886911ab076
SHA256
09b90dec9d8eeeebc4366e8a5d08511ca9f2adbbc885e500356479ae31c66275
SHA512
2b33e6e293d51e6b2870e3252dabcd1188c36bf97201297f8ead08195d85f3e583c32ebd993b4173e0cdd874c29cccf4be80fab12a2a437f7a79135883f9387a
SSDEEP
768:+CSqWQ1geCiGnLTHpW1XiO5OpBl71nZbsqCYQFov6Wtwihx4hdrfszF:5SqWQGPnLTHpKiGOpBl7XFGFoiWtwQ88
Checks for missing Authenticode signature.
resource |
---|
37c4f1e97467385089bc9eda1e37fd75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ