DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
16a7bf0338999525cac91e9dfa577104_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16a7bf0338999525cac91e9dfa577104_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
16a7bf0338999525cac91e9dfa577104_JaffaCakes118
Size
128KB
MD5
16a7bf0338999525cac91e9dfa577104
SHA1
561b019e7ac6eaeb4f1561dd23097d90d37d6783
SHA256
2b044d4bfb530f8a2fcb3759c14bdf88be8b3c662229d777bc9e9aa51a6912a8
SHA512
c2db7714c7454d9e3ccf84c4b304e7a1c68a604eabb551151ce9c3b3c221f3c36b507cb52b0b219fd614ecb440ad457881f9b29fc83ee9112659d9dfa3e8a317
SSDEEP
3072:ZSL2+lfdHlEAskeGEGAmS2UhfCUfAYoP9:x+f9
Checks for missing Authenticode signature.
resource |
---|
16a7bf0338999525cac91e9dfa577104_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE