DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0249d9e0fe3b377c728644612c12e54f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0249d9e0fe3b377c728644612c12e54f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0249d9e0fe3b377c728644612c12e54f_JaffaCakes118
Size
18KB
MD5
0249d9e0fe3b377c728644612c12e54f
SHA1
96d31640cb0ca5bcb9d719d8b94a54d2ffbc72d2
SHA256
ca1adbac60b1a84cff4206e2a608ff423a9b685a9a3032fdcfe8a5e29ee3a132
SHA512
0c76a8c418cee9b8a763e3739adb255a82c1582d94a568d6b0c78d9a215e53e443168bd180e18841cae170d7af4a878493b740a87876e4e2c2b79987e0159b72
SSDEEP
384:dlm8ILnaA+sH4+bYx8nd5tebfPEGZfGpgKShXqF2eLeHi6sCB1:nILnaVt8d5cIG0g02e0i6X
Checks for missing Authenticode signature.
resource |
---|
0249d9e0fe3b377c728644612c12e54f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE