DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
ff8c8604531baae585e45cd0073e9536_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff8c8604531baae585e45cd0073e9536_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
ff8c8604531baae585e45cd0073e9536_JaffaCakes118
Size
19KB
MD5
ff8c8604531baae585e45cd0073e9536
SHA1
262d1e335fbd627d7ca75260eedab1f6934d0a22
SHA256
4fed917d4f14f37602bfc9b3f8f8f0b0f9508f23a0f0086f71eced0decfcdbab
SHA512
a50c79523c8161cfb4f57909e6bb39c6c49b692e869bee6efb22384a254b0064f18f4208049c8c72c174b13930a569823e04ca2dd8437d617659f8bf44d48a96
SSDEEP
384:AWWTEcWHaBWNvMHPfSelLjGA3bdgEafDSyzGdee+9FgGcouiB66I:rc2MHPFlLK+aD5GX8CPoBB+
Checks for missing Authenticode signature.
resource |
---|
ff8c8604531baae585e45cd0073e9536_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE