DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
00479c7e2931a9f6eb39f47904082973_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00479c7e2931a9f6eb39f47904082973_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00479c7e2931a9f6eb39f47904082973_JaffaCakes118
Size
20KB
MD5
00479c7e2931a9f6eb39f47904082973
SHA1
d4e09591eabfc161cbd550a80332815f58012d7b
SHA256
de43ed83284d52ba2bad7758d9b7e1659ef01d27734eca561f3f604218b468aa
SHA512
b6b0f37cafde379beef43a472787286132110061c5da38f34ca6d929744646358ec8e22e1870b13f3ca3509fc8ff83146fe04f7ce5d27e458520a31d290e7d1c
SSDEEP
384:BWWTEcWd1mouqQnCspEhP9x/ntH1JNCJ61CoRkcEZqk3j9yN6JE+T5M56d:WDcpqhs+ZftDNOFIk3jLJEU5Mq
Checks for missing Authenticode signature.
resource |
---|
00479c7e2931a9f6eb39f47904082973_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE