DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d5fb6c6b64cc839a628678ec7be31be7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5fb6c6b64cc839a628678ec7be31be7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d5fb6c6b64cc839a628678ec7be31be7_JaffaCakes118
Size
31KB
MD5
d5fb6c6b64cc839a628678ec7be31be7
SHA1
97447f36eeb4992fd67b49bbf3c01f3703fba5bb
SHA256
bc3118401d36c2f2e6c820a05ec93d4d451348a4c4736d48de65ceafff413a27
SHA512
56c29bd094468c65991defb6da43a7a125d64b4616e59c457dabc8d89d5d09f36bd42a90c9be52cad2390f2a58c8f2abccc324907b140c52bdeb10894c643916
SSDEEP
768:Ds3U0ZLJ3VXURNPiSDp10CuCit6SjZYkHR:SdLRpbSDv02sYk
Checks for missing Authenticode signature.
resource |
---|
d5fb6c6b64cc839a628678ec7be31be7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ