DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookCl
HookOn
Static task
static1
Behavioral task
behavioral1
Sample
de22a6bf64afa73e2c6f7620135b6449_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
de22a6bf64afa73e2c6f7620135b6449_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
de22a6bf64afa73e2c6f7620135b6449_JaffaCakes118
Size
28KB
MD5
de22a6bf64afa73e2c6f7620135b6449
SHA1
d3cf3a6802056f71b05ba48d7f6d4f849abfa9c3
SHA256
50f053ea22c933a37898bba7fb5da7654e164c96a3dd06229d4474dc2185b97b
SHA512
da7df702be3cfccaf63f291997f75f52a215308fb47d397e3bb910e8c134fb456c48a612af9dde67f25b9ca188ca78943aca610e8e9d7a7b864f06326c23d877
SSDEEP
384:/wAHxUSCqujBwKnGQ6pIEAcyhZR4f3d1LSh9V7yLp5qR5QuI8EPIHAzdLRq1QJGw:5KSCquFw0GQy+7R4f3dMFO8ArHdFq1Pe
Checks for missing Authenticode signature.
resource |
---|
de22a6bf64afa73e2c6f7620135b6449_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HookCl
HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ