DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0006e687bc1eabbe1eb0ce346ee3bcc7_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0006e687bc1eabbe1eb0ce346ee3bcc7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0006e687bc1eabbe1eb0ce346ee3bcc7_JaffaCakes118
Size
17KB
MD5
0006e687bc1eabbe1eb0ce346ee3bcc7
SHA1
cfee635a44a4202da2cd00300c37b172da4ec6e3
SHA256
9433221c4f62a056e360b15a86d50e10ea1e5c1edfa6b2cb160387fae2524c18
SHA512
399e8b57b74192f35ae4b1d826a19d4a9590ae44a0bbf6f12bc8a4fc0b4799c7b24e6dadbee9d333108644858baba3cc69a166faac05bbc37623069485181c2d
SSDEEP
384:HWWTEcWtPJVlYJ124M5LOFdWqdjLOKY/pQzi+/OGB3pmAYtWAc71HskBbmqf:AXP3OJuypPOH/C36nWAcqkBrf
Checks for missing Authenticode signature.
resource |
---|
0006e687bc1eabbe1eb0ce346ee3bcc7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE