DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
000000b4dccfbaa5bd981af2c1bbf59a_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
000000b4dccfbaa5bd981af2c1bbf59a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
000000b4dccfbaa5bd981af2c1bbf59a_JaffaCakes118
Size
21KB
MD5
000000b4dccfbaa5bd981af2c1bbf59a
SHA1
27333588c6f2b7c076e9a279bb40fa6d6f9afec1
SHA256
3ab5d534d493e65f01ee5dd12d650091cbf5a5a83356cbf3f8abf7ad5350ed72
SHA512
0f6412f231a44972d3661cf1347a09495e88d7ebf75ec9a9cf8ae9ce3a577aeda6b5608c3a930666a020660cffeb732915fbfab96fb3648e8d31dda1f6e2a348
SSDEEP
384:bWWTEcWWcL9bXUU4Y1tzcz7O/vTHIreN7zNyM3tsbFxJ26IbMpBdGUEf3GR+MAd/:UVhtoHO/vVwZIbvf3BFwvzA
Checks for missing Authenticode signature.
resource |
---|
000000b4dccfbaa5bd981af2c1bbf59a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE