DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5d04fff8906beb8eddd26a61838587ed_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d04fff8906beb8eddd26a61838587ed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d04fff8906beb8eddd26a61838587ed_JaffaCakes118
Size
25KB
MD5
5d04fff8906beb8eddd26a61838587ed
SHA1
ca5fe33f8eb05a3e7467e15ad7abb28192dfc5b2
SHA256
ff4f0e0dd803ea4c5f218f7aa270419662a516c8e264e8b2a3856608bd3aa185
SHA512
91fa9eb977ae4603e169d1311ab901b618e20c89e04f87e6c26a45529fa10546673739bf4a533f9383965def700051c2b4e5788745bc23dcc2f252c65131af5f
SSDEEP
384:UFqPImkt5KK/DBTdWvOkbjT7UxObZSXXxO/tBq7AS4fss0i28ugGInwpUZW8mcW:9w5KCDB8PgObWQq7Es9iJugGInI
Checks for missing Authenticode signature.
resource |
---|
5d04fff8906beb8eddd26a61838587ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ