DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4946eb9b238fa0fe262cc29620d0308f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4946eb9b238fa0fe262cc29620d0308f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4946eb9b238fa0fe262cc29620d0308f_JaffaCakes118
Size
44KB
MD5
4946eb9b238fa0fe262cc29620d0308f
SHA1
95ceaaae86c194d73adb6ba8538773de5108bdce
SHA256
83d60f571ecdbe06f0bdef5f31583da5ef7ec7f5a71626564bbb30bee1f9383a
SHA512
e4f726c6f0fc6d70528ccdbec098b3e88a69b4ce9345da1158653978c95c5335d71741c3b322bb884b33bc444a5c14a223276acf0a1a6728285f09f05a3d04a5
SSDEEP
768:t88F+8S1Rh3eBh3m7PzXie3kw/CVYIpy63oyn9Q1AxExdEbl3J:tjS3U3m7PzTk7TF3oy9nxUK
Checks for missing Authenticode signature.
resource |
---|
4946eb9b238fa0fe262cc29620d0308f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ