DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn
Static task
static1
Behavioral task
behavioral1
Sample
621d1d350e672e93d60a3b214c3428d3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
621d1d350e672e93d60a3b214c3428d3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
621d1d350e672e93d60a3b214c3428d3_JaffaCakes118
Size
69KB
MD5
621d1d350e672e93d60a3b214c3428d3
SHA1
781f8bd3c66b4fffe098d6f2fc11ab0aa7375faa
SHA256
cbbe5e53d0fdfa45e4ab715ec11fddde662abb558683cafdf48e53a74470f0ac
SHA512
5dd4e988f4ec88c80219851d5408ca05446bc991833ec5e317f4c790c961f4f251fbcc46caf703da375fa968bf7077920379916abb537299dd7490369c162bb9
SSDEEP
1536:naWuPK9EbCiHCj/PHiEtfEEm7V1m29evV8CHZWtl0b:vuPKSbCtNuEm229aaCHZ40b
Checks for missing Authenticode signature.
resource |
---|
621d1d350e672e93d60a3b214c3428d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ