ClseHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenHook
Static task
static1
Behavioral task
behavioral1
Sample
5d147b067842820d468b4f17fe5c43c6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d147b067842820d468b4f17fe5c43c6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d147b067842820d468b4f17fe5c43c6_JaffaCakes118
Size
30KB
MD5
5d147b067842820d468b4f17fe5c43c6
SHA1
14f43eccb725b91dcad8d57b0bbdd672529fd763
SHA256
93761d71eb77481b4cefb539d1e0aa57e67ffab5e14d838c49e7a53ee29a9941
SHA512
e09b11fd28faf956e139cd7055663925bb2ce4dd2805ae5ab3b00f0b37e14937208fc4c97a6061bbae3f8f7a5e50cda0dc9b5c1fc9bb00a1339e5f6ce718ec12
SSDEEP
768:BLM8JjlVmnpNqRW+UpsRAguKm+pDZFHdhP/j:BLnjlVmHDpsWgF5hj
Checks for missing Authenticode signature.
resource |
---|
5d147b067842820d468b4f17fe5c43c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ClseHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ