DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
004f215ca6ce48474f456f0e5d5fa89b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
004f215ca6ce48474f456f0e5d5fa89b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
004f215ca6ce48474f456f0e5d5fa89b_JaffaCakes118
Size
21KB
MD5
004f215ca6ce48474f456f0e5d5fa89b
SHA1
f431066018f0665a35e7290b4d8958d21d1cf3cc
SHA256
79812b07235c6b7e3ffbe057ac85e4600f763e7b386c548358a1bb13841a619d
SHA512
cd778a1c6a738ca9f8f3b291789ad7f8db15e80dd45a460a54d253fefc39ae31a188f88109728943aed052582bca4de21d6af4685cf2824c72f9e72bd1be9ed5
SSDEEP
384:pmWWTEcWjg1ovT1mVy4FJFASIxZ6kSJiFaPgsXgx9spr5IESSxGcNy7gBGRZQVKF:D21ovZkjFDAS4Z6kSYFaPgsXg3spJtNM
Checks for missing Authenticode signature.
resource |
---|
004f215ca6ce48474f456f0e5d5fa89b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE