DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
Static task
static1
Behavioral task
behavioral1
Sample
67a9acd4c7f7e86dcaa39b1b9f9dd703_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
67a9acd4c7f7e86dcaa39b1b9f9dd703_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67a9acd4c7f7e86dcaa39b1b9f9dd703_JaffaCakes118
Size
16KB
MD5
67a9acd4c7f7e86dcaa39b1b9f9dd703
SHA1
612a2dd89f57200d0bfbce37ea67daeaadc0056f
SHA256
febe41e692429014b44f8903ab0bfbd1c474307efa3166a56d8ce35d20a5288a
SHA512
2b84d1e4b7684570ddc964a02e2d8e9ea3fbafad1e7f9889c77be0f7d7cb5079a0e578180d104aee534fb17f069c43b037e8a155e1bc6d50d9f3c79c36a1a219
SSDEEP
384:nluZGtllvtxonEvNwHWEI0RqD8pCAlOMsG5P3Ov:nk2vtxH6HWJ0W8YaQ
Checks for missing Authenticode signature.
resource |
---|
67a9acd4c7f7e86dcaa39b1b9f9dd703_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE