Dll1CanUnloadNow
Dll1GetClassObject
Dll1RegisterServer
Dll1UnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a25429bfddb9fcb84c8cbd4abdc6e3ca_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a25429bfddb9fcb84c8cbd4abdc6e3ca_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a25429bfddb9fcb84c8cbd4abdc6e3ca_JaffaCakes118
Size
28KB
MD5
a25429bfddb9fcb84c8cbd4abdc6e3ca
SHA1
0c087ae0cb8baa052303e2561cc06b509acd5234
SHA256
8182496cd75ca5c34b1d0c0bcd9c02fdbb01d4220f4cc4c93acccc60c1af3ce0
SHA512
db1ef883705d67749d555aa9cf99faedb894022b65e22bae74f21b2431c8482fac6060cb40acba64eccfd194d757b5d22d356f60c7fe6340c7d6f9cea440c39a
SSDEEP
768:7KSCquFw0GQy/mRsr0QrxX53HpBfrIN53T:pCquFw0GQe/ZVpGN53T
Checks for missing Authenticode signature.
resource |
---|
a25429bfddb9fcb84c8cbd4abdc6e3ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Dll1CanUnloadNow
Dll1GetClassObject
Dll1RegisterServer
Dll1UnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ