DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookCl
HookOn
Static task
static1
Behavioral task
behavioral1
Sample
41ef7ea0e29065f1ec3ef7d8e61b9970_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41ef7ea0e29065f1ec3ef7d8e61b9970_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41ef7ea0e29065f1ec3ef7d8e61b9970_JaffaCakes118
Size
24KB
MD5
41ef7ea0e29065f1ec3ef7d8e61b9970
SHA1
bbf4e6e07cc37649811adc6e0e15e321208c8b7d
SHA256
97943cba22c12f37b91a4f7836a27b4219cec79d845de94eaf96047f209ffc8a
SHA512
a9d2545152579e8553265979c57ef88aa2bddb6b7702e0ddd262eb0ae0f8c38d008802ddd61c22c9970ecd9b15cd7f633cb07fc873bb81fc1061b4b23c2c7e93
SSDEEP
768:vlCjoqdS5QVyFL4xN1U3SboZouM3ygze50:v0sqY5QwFsx44oZ/mW0
Checks for missing Authenticode signature.
resource |
---|
41ef7ea0e29065f1ec3ef7d8e61b9970_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookCl
HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ