DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif
Static task
static1
Behavioral task
behavioral1
Sample
e1458444ef76e54bdea06e40d61c4f1c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1458444ef76e54bdea06e40d61c4f1c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e1458444ef76e54bdea06e40d61c4f1c_JaffaCakes118
Size
43KB
MD5
e1458444ef76e54bdea06e40d61c4f1c
SHA1
67ee99cb915760faa58eea9c4a679021ad0337fd
SHA256
da47f03ce2b2bc47e5ca71b3ccf3af794408fc8223e58eb434bd13f31c982fc8
SHA512
ddff3a613330dfee32d73a482dad59e4a35af2726167f0f9fea2ea4c4288a1317102f47717e8450569748a54d473eebd3a9c2cb310e0dc143fc0877e4b2840ec
SSDEEP
768:pCSqWQ1geCiG8LamvkiO5OpBl1LHPa+r0iIx0CrQxpx4oIwK:wSqWQGP8Lam8iGOpBl1vBCsxvPK
Checks for missing Authenticode signature.
resource |
---|
e1458444ef76e54bdea06e40d61c4f1c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ