DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
33958728125d2372e78e9a0ff64ce29d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33958728125d2372e78e9a0ff64ce29d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33958728125d2372e78e9a0ff64ce29d_JaffaCakes118
Size
128KB
MD5
33958728125d2372e78e9a0ff64ce29d
SHA1
27edb738c199cc93c532b332de3e8d40398ed3df
SHA256
e286a3a54b79ff3b8176e6d1ef3492b97a07aa0f64406dbf088ba8cac9732fd1
SHA512
43c4a83af6bb0d234ebbdbc68c1ea211dbefafd0b63c11324ee3ac51bd0d8083dc2fad14fe92de08ae7b96235648bd20404453ec8646690111b8196000015a43
SSDEEP
3072:0SL2+lfdHlEAskeGEGAmS2Uh4CUfAYoPB:m+YB
Checks for missing Authenticode signature.
resource |
---|
33958728125d2372e78e9a0ff64ce29d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE