DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
fb00fb9c787c8c9f64eddeb27810f2a0_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb00fb9c787c8c9f64eddeb27810f2a0_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fb00fb9c787c8c9f64eddeb27810f2a0_JaffaCakes118
Size
120KB
MD5
fb00fb9c787c8c9f64eddeb27810f2a0
SHA1
cc60be8bea93318d0de22ac567b18123f8ee1f96
SHA256
862946dd55d4f254126a02ab77fb385c077d7ef96910a47f89ea7cbdf281be8e
SHA512
e0e369ea2fafb15551ecf194ee5506f26e3308bf891e9da7f3bb5e42f96b130cf21155cc6d57090591c5ede9633c4755b3184dc087edc34d05290a9f4f09c491
SSDEEP
1536:IoqWQ4AAp40cfnUkN2NxQVbtAXBXoyoOKNz78+:dxAN0mUdMAIP7v
Checks for missing Authenticode signature.
resource |
---|
fb00fb9c787c8c9f64eddeb27810f2a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE