DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif
Static task
static1
Behavioral task
behavioral1
Sample
8b4a32030ef5570ed37d85571bcc8299_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b4a32030ef5570ed37d85571bcc8299_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8b4a32030ef5570ed37d85571bcc8299_JaffaCakes118
Size
47KB
MD5
8b4a32030ef5570ed37d85571bcc8299
SHA1
188d285f68bab142899f5cab30d0ac98dc6de164
SHA256
58482d8eac16400214fbe3aa9d460806dc040a57bcbb46dfcbcaa5c089fb08c9
SHA512
23beb3fdb78728f7bffc770de7a6724feac5872509a87745856e9285147a729a53cca7af63b5246cce647c77582e2f1a7935865845c67d91daeffcf2da5b9939
SSDEEP
768:JSVMqQCVaQkAwjWnQq4R49Iq1iO5OpBlWb4T7nPVI0qtuJ1IxOa0QH1ZM/:gVMqFVaQ/f4REIq1iGOpBlWbUVWKiaQM
Checks for missing Authenticode signature.
resource |
---|
8b4a32030ef5570ed37d85571bcc8299_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ