DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
fa270cd97c245928049ddcc8bba9c46a_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fa270cd97c245928049ddcc8bba9c46a_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fa270cd97c245928049ddcc8bba9c46a_JaffaCakes118
Size
116KB
MD5
fa270cd97c245928049ddcc8bba9c46a
SHA1
3c289c87088da9fc6d99d98440f76f236f1ad2ec
SHA256
35c28a817f8c5f971bd635b21df3c83097fcfc492365f47625180644a199cdd3
SHA512
4876d4e7cbf4435e9757c045b2cdf7b320e971c74f3396a95c33a9d74a58a229784899d10da3e8500105722cd094736ae83885d3e4a62ba3edbfa57132683170
SSDEEP
768:N1QoifqZOfQPSPonSCKtX2lvvUNj0IuTPby3+Jq8CBM4EwXGrrF5ZnG6v2uApYqJ:N1QvfqZyQJ2txC+78C9RWrrZt/5O
Checks for missing Authenticode signature.
resource |
---|
fa270cd97c245928049ddcc8bba9c46a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE