DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOk
MgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3dbd8af63c04a2dbb27d1cd744cbdb25_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3dbd8af63c04a2dbb27d1cd744cbdb25_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3dbd8af63c04a2dbb27d1cd744cbdb25_JaffaCakes118
Size
30KB
MD5
3dbd8af63c04a2dbb27d1cd744cbdb25
SHA1
0d7f8b114908e9391cf12acee8c51eb069ff5d70
SHA256
d3ba65cc6240279dbcdf1d526e081fde44c04acb7d761b2e15f92abd91550277
SHA512
58dbbaa8fce6012c838783ff83e592f73a5c21465f95570f6f111f4da50355b5af6c292b1209418545340ad4e497169ebace244d2a070ddd75346f9e3970ee7e
SSDEEP
768:CKSCquFw0GQO/mRsrdpRwwYbg8v43IUdDya:GCquFw0GQixnwpa3rt
Checks for missing Authenticode signature.
resource |
---|
3dbd8af63c04a2dbb27d1cd744cbdb25_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOk
MgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ