DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
00040d9c8a6ee284a714e5beec26e0fe_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
00040d9c8a6ee284a714e5beec26e0fe_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00040d9c8a6ee284a714e5beec26e0fe_JaffaCakes118
Size
21KB
MD5
00040d9c8a6ee284a714e5beec26e0fe
SHA1
8a3822183ee4e8ce89d94e24125ee2b98f1accc6
SHA256
914d7f9ecaa3adddf12fa09210d509baf228314ae76108d919f0661f0e8f6baf
SHA512
b69228aa975a368673aeb8ff858661d74427b3bae2869544e4eb68a947de1b4c65d40d7451835c045fcc56dfd212912790dd1f56ff41a92bd5ea3fe0b8044c9e
SSDEEP
384:YWWTEcWR5ejBrN2cvRSosNniHhOoYt+XRQlHQQW67YsR6vpSP2qVUNUzEw4L:TQjpN2cUoKnGYt+hQaQWkYskvpSP2qLy
Checks for missing Authenticode signature.
resource |
---|
00040d9c8a6ee284a714e5beec26e0fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE