DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
46e6590cc9f3cce2b99306c69c0f5011_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46e6590cc9f3cce2b99306c69c0f5011_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46e6590cc9f3cce2b99306c69c0f5011_JaffaCakes118
Size
18KB
MD5
46e6590cc9f3cce2b99306c69c0f5011
SHA1
71ef0ce8275e5a87fdf705a9028a467569eee73c
SHA256
0f9502e12c44107625608c1868302698495dba74b68796961cd64c6d0de118a8
SHA512
039266bcaaa2a668810b85af04c862164d7c5237a293d5ea4d7e58c310cc3a092e4eb78d2f21677a3237c101a19f7bbb20ee9fbe8e5b53d792d962d01d82433f
SSDEEP
384:VPc8qt5KK/Dwzu5wVdaTNgt6jN558usyCt3fQ:VEF5KCDku5Q+UgyusyCtPQ
Checks for missing Authenticode signature.
resource |
---|
46e6590cc9f3cce2b99306c69c0f5011_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ