DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookCs
MgHookOp
Static task
static1
Behavioral task
behavioral1
Sample
ad74b865c3e4b29c60947d0ee638a77d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ad74b865c3e4b29c60947d0ee638a77d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ad74b865c3e4b29c60947d0ee638a77d_JaffaCakes118
Size
48KB
MD5
ad74b865c3e4b29c60947d0ee638a77d
SHA1
bdc189063cbef117df4746e13980486af70183a7
SHA256
4be726a7b0e7d3ba4ef492a187a4863d47d8612b27b0df276382488ef93edded
SHA512
df05973ebd710b37831a77c6d2c7d98ecd204bfe6116d507ecaa318e83fe240867dc2987f1f29ccff4900ad001315ae886809ef7692d8bbfbf700e265ca3ddf5
SSDEEP
768:iPMmpM8V/5Q1GuorD6BfI/iHCjMAn4b+A2W4rF5VX8u+qBxOHQmk+1e:iPMajG6u+/iHCj/nT5VX8uNXJmk+1e
Checks for missing Authenticode signature.
resource |
---|
ad74b865c3e4b29c60947d0ee638a77d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookCs
MgHookOp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ