DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
Static task
static1
Behavioral task
behavioral1
Sample
b8054b3fa2c3c4c4b8141aa1a05daf95_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b8054b3fa2c3c4c4b8141aa1a05daf95_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b8054b3fa2c3c4c4b8141aa1a05daf95_JaffaCakes118
Size
30KB
MD5
b8054b3fa2c3c4c4b8141aa1a05daf95
SHA1
c496d1b279de8eecfe635e6395ad113077d0a550
SHA256
08046fc3b3cb705c404d55dd9c5a2d698db23bad6c54c09521bc2cee4754d15c
SHA512
b0757f48862c829f43e64892588967e141886b227a37bbd374b9293213001f0b6a525d713630ddea9be2b28d497a96b15d7dbac34e87b5ac6bc77e1c7103b7ca
SSDEEP
768:+KSqquxD0GQjgRJMezvVwj/Erpn7Ozd1iuiIVGt:aqquxD0GQSPzveo7OpL1Ut
Checks for missing Authenticode signature.
resource |
---|
b8054b3fa2c3c4c4b8141aa1a05daf95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOn
MgHookff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ