DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
8796d67740d138e10a25f391ba644f45_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8796d67740d138e10a25f391ba644f45_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8796d67740d138e10a25f391ba644f45_JaffaCakes118
Size
51KB
MD5
8796d67740d138e10a25f391ba644f45
SHA1
f2ce774eba656fc46693fe921edf5d477d162d2b
SHA256
c561b2847bfea2a243bdc5082f5a5a29ebfdfe735f9478e4e5631ed64cd2e0a0
SHA512
13a473672bf4169a76841be0bb66f8aa3a56a85dcae7cacb8fe06d26dc44cc82d8f57447fe984d52efdc80820ab626b126bae223ab6172c474e5ce149e385f1c
SSDEEP
768:V0c89T50klzIF3XcaT0i38jjCLoUee8wREeIcLRzVLR3MRgCazp0mVRlJrdHpyBB:S/T5jq3sW0CLoi8OIciRmp0mVD7MtD
Checks for missing Authenticode signature.
resource |
---|
8796d67740d138e10a25f391ba644f45_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ