DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
Static task
static1
Behavioral task
behavioral1
Sample
462100484b1e6b9880e8ad8c43398bfa_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
462100484b1e6b9880e8ad8c43398bfa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
462100484b1e6b9880e8ad8c43398bfa_JaffaCakes118
Size
29KB
MD5
462100484b1e6b9880e8ad8c43398bfa
SHA1
27e377028067288d6d7728352a46ef7c40da4bdc
SHA256
9d8ca1d82b7136ce8960be6d486bf7bf5ec156e12577eab6505b7a53eb23baeb
SHA512
dd657c9138b0f16c0d0a3d13f8b191c13f876985fe5e77a40330a31232c81cb923b5e929a76bb8d9bb8d3196cfb6065fb51fca2c90c9b1523ce6e67723959d8c
SSDEEP
768:/KSqquxD0GQjgRJMeYGc9YGgTPdhPvid3K:FqquxD0GQSPMgJBGK
Checks for missing Authenticode signature.
resource |
---|
462100484b1e6b9880e8ad8c43398bfa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ