DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
e73dee11f076ea45fead4d4c9073a1be_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e73dee11f076ea45fead4d4c9073a1be_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e73dee11f076ea45fead4d4c9073a1be_JaffaCakes118
Size
128KB
MD5
e73dee11f076ea45fead4d4c9073a1be
SHA1
6d0dff8ad57ebd60e5e89dcac7a648b6f5c059f2
SHA256
9f8f1f27231966be19b3b4f3161c5dabf86e5e662de27e60541a5589d19865fb
SHA512
7b5796ec932add4a58a0aa7702e5bf01bf90531d6e1f0fea3658b569b1bb8614bbd9f222abb3eab526c8718dcd650249bce798354f8fcbe6a3cc8c7ac830b567
SSDEEP
768:9ECaqTQ+hW807aX4U9MNboBCDY1gru8qSFXVsRrEAjUZgV2ggxbbEKc9X0MrYPv7:NaqTQF7aX4LN5yK+VEAjCOwt80MEvjX
Checks for missing Authenticode signature.
resource |
---|
e73dee11f076ea45fead4d4c9073a1be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE