DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
001f8ef326dce0b114f34a0ecede4d7c_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
001f8ef326dce0b114f34a0ecede4d7c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
001f8ef326dce0b114f34a0ecede4d7c_JaffaCakes118
Size
18KB
MD5
001f8ef326dce0b114f34a0ecede4d7c
SHA1
70a87975b517941aa2664e2afd77ce10d0924e7f
SHA256
48ec4b91dee6bfc82c4419e73ad0b7611493648125dc6a1871852c81d7c1d933
SHA512
ca03ad087063ce475e08bce69ca77b285ba087159f4513943432aa7f7654e15d3583ce09b256b31ca8160bcb52ba06af0c9f29fc8d595092a2985459aff0497b
SSDEEP
384:fWWTEcWaZwSpjNfMQTLhL0EnDj3k7xIrRHkNEwfgxFAjtFCfr:IApj5MQT9L0iDjgxTec4FAjtID
Checks for missing Authenticode signature.
resource |
---|
001f8ef326dce0b114f34a0ecede4d7c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE