DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
f9ed1e03e4e3900e5ca7411706c3d092_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f9ed1e03e4e3900e5ca7411706c3d092_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f9ed1e03e4e3900e5ca7411706c3d092_JaffaCakes118
Size
124KB
MD5
f9ed1e03e4e3900e5ca7411706c3d092
SHA1
6988e8fdd0e852f20347d16bbb7e6859679a8a89
SHA256
7914c35afda2d568a63998185aaf5f838ee26f59c39c18c619094114791d1a34
SHA512
4843bc502e6dc1e163707c43e7a9da5f8802e955d7b9949b86b24164ea5ac744b6b0cef1c310680854e30dbcfd723f994eb25bd4c26d3891a8f7699088d3e318
SSDEEP
768:QCOqlQuGf0eYX0ux/bjNub/viZZ9L7uZQ5a0c8fQfLLSXkYUcvUkRe6U/nKn2ma6:XOqlQKBX0uxPA03/5Hc8fA20MzLU/k
Checks for missing Authenticode signature.
resource |
---|
f9ed1e03e4e3900e5ca7411706c3d092_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE