DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
eccd007ed28aa86059193d6ed59cd3cc_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eccd007ed28aa86059193d6ed59cd3cc_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
eccd007ed28aa86059193d6ed59cd3cc_JaffaCakes118
Size
120KB
MD5
eccd007ed28aa86059193d6ed59cd3cc
SHA1
3b88c7e861250c60ce91ee3f8618259c5bce4edc
SHA256
d00656ea72cd0a97a4993c4c0180862067a5838dd8b5feafd1b8efd470f7c6f9
SHA512
f9690ed736e654bfd771c875f1739550c12e3c7f6cdf4f2ffea10ecb84978c0ee10ae723b4762c2ee8042617cf8263fbe96304bf362077c3f81b0dede6048fee
SSDEEP
768:K5tayhq4QC+IcV4bbVPt8+5bKi5OZvdczmwwR8sWLN45YmvOHuZjdAWwCSXBJeUC:uhq4Qcemp3z5OZL8F45TOShAuSxJeH
Checks for missing Authenticode signature.
resource |
---|
eccd007ed28aa86059193d6ed59cd3cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE