DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
WowHookOff
WowHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a86a3f90897fe635c3b59cb5102bec35_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a86a3f90897fe635c3b59cb5102bec35_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a86a3f90897fe635c3b59cb5102bec35_JaffaCakes118
Size
66KB
MD5
a86a3f90897fe635c3b59cb5102bec35
SHA1
eabc500f43f44522c597e6e97fbf451dc59ed585
SHA256
1d8e7801a24ca845fed59f5c3794f0f19a7059b0cdf2a2edd38c6813cf1349a6
SHA512
6a8782b5dbfce1a531130b4d90dade6398127b4cfb0971a8677ff5990466bca87e89122cabb9500620544b4a528a421ad9efbf1e01bb9534e2b3c1453f5035cd
SSDEEP
1536:p7d2oefadephOQotcpGW/Wh6MHOF7H5wLCLL7x3A8v0gs0:p7dGS8hEtkGu665RH5ZLL7xdD
Checks for missing Authenticode signature.
resource |
---|
a86a3f90897fe635c3b59cb5102bec35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
WowHookOff
WowHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE