DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
Static task
static1
Behavioral task
behavioral1
Sample
73f34c0614ab52c04b7e5385ee81267f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73f34c0614ab52c04b7e5385ee81267f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
73f34c0614ab52c04b7e5385ee81267f_JaffaCakes118
Size
17KB
MD5
73f34c0614ab52c04b7e5385ee81267f
SHA1
a865790bcbc28386aa402c805c425b991eb93cb6
SHA256
3d6e90a09034efecde954b8586e266fc53cb2ac3c743050f544882f85c31e6ec
SHA512
72ac65888d4827052def68fb41503e773fb70d0589d9f4baa518f795f9a51ea8b262e92819425f895adaa362043f68e9a3cef96b1bf9d4b32fd0f6c043b0604b
SSDEEP
384:dj3d25YFmuV547AL5zH1WwIjm0yUJiKX88qi0+6jw9:xkWmuV547G3H6hJiXi0+0W
Checks for missing Authenticode signature.
resource |
---|
73f34c0614ab52c04b7e5385ee81267f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE