DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5f9b313725bc7d85897851caafec518c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f9b313725bc7d85897851caafec518c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f9b313725bc7d85897851caafec518c_JaffaCakes118
Size
54KB
MD5
5f9b313725bc7d85897851caafec518c
SHA1
c8ab693cc174d01b1c1ed0a100860217b06ebe2a
SHA256
11d10b99e01cd6d8876e207ed007dbb63e0abfcd91dce3ba311ea80741a83884
SHA512
1a8af248f6203414e594061b95f36b47cbd92d60622491bc0027269b0b049b3910a907d7b4cb34f5f484b3df3188a02031475d4b9fcf26f4e0fab0cacde952c2
SSDEEP
768:P0c89T50klzIF3XcXYuKKqbGLmroSF9mOD+Looi8J65mx7Nj8Fjv7q6foRnhgedJ:c/T5jq3sXYC+oRW+k865DjfoRnhTVj
Checks for missing Authenticode signature.
resource |
---|
5f9b313725bc7d85897851caafec518c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ