DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0010dab0f0e6f3cc608649328fcfe282_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0010dab0f0e6f3cc608649328fcfe282_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0010dab0f0e6f3cc608649328fcfe282_JaffaCakes118
Size
20KB
MD5
0010dab0f0e6f3cc608649328fcfe282
SHA1
b3402556bd2dfbec95cd0758afaed6b8c7d35f45
SHA256
6622db7957ef2af8feea5433c1b2753f1e065351d39b6a87694d01ed820b7993
SHA512
9053d7b56fbe23d0c4c9a5e7b53e6cbca976efd3cac0346ca1e17b6c3f27bfb1d424f45a3ca9fa2612e57597b0f170f13185c06d2da2f90e4cf475f6a31191f6
SSDEEP
384:bWWTEcWQjK+GfpbWckx8wWEQvZMKq2FpIK+1S9bQ1MT1IHDsuQXUHJ0skxZzRkJ:UibGJjvZMKhuK+1i6g1juCUHJZ6ZKJ
Checks for missing Authenticode signature.
resource |
---|
0010dab0f0e6f3cc608649328fcfe282_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE