DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4b147ec6113d85a80384c7d1bd38b38c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b147ec6113d85a80384c7d1bd38b38c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b147ec6113d85a80384c7d1bd38b38c_JaffaCakes118
Size
32KB
MD5
4b147ec6113d85a80384c7d1bd38b38c
SHA1
fae664a5c411ad69f4215052a75f20dc62a6ffe4
SHA256
1a7cbfc714371fdb5dd0d53ae027f2e5074bb6efbd7a2f8e789abb8168e36bbb
SHA512
a8fb924cab2ed0ad0a631d30efcd495210a14ba82ad74bc36ee0ac7c06045940dbf783786ec6a4ff51274503d0fb3d36f138964cb4349f10d59bf62ba81ee83d
SSDEEP
384:9zsezuEaeyCAC3y8pENMtE7wkEKvGYmzLlcosOfhAkYOuXD4IMDkAzdKr0FZZoxw:9z+SACC8pEmtqwkEKYF3ijDUtdKrwsu
Checks for missing Authenticode signature.
resource |
---|
4b147ec6113d85a80384c7d1bd38b38c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ