DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
3bc917f7d10b14625b8211c1343fac46_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bc917f7d10b14625b8211c1343fac46_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3bc917f7d10b14625b8211c1343fac46_JaffaCakes118
Size
19KB
MD5
3bc917f7d10b14625b8211c1343fac46
SHA1
c4762e5180859bfe171d7c0c4b20708f0e234755
SHA256
e67877c8d0e21ac8e2b65ef49c67fe9574dfecf256abe7046e52592c45ad2aa5
SHA512
7d502389a0761ef3fd1c80d592d36cf0ca44fdc3a80302bc7e3f757dd66cae52dc328b921a0ed67b76d915ffd2fb23df9cd25a1d507c81b39067c62829d4a936
SSDEEP
384:3WWTEcWsJBa2yEbEAEkDL+djJimrIpoDoI7fXb0PctYXitZc623XJ6zgVN0D:QWXa+X2HvQoDoOr0AYoOD3XozgVNE
Checks for missing Authenticode signature.
resource |
---|
3bc917f7d10b14625b8211c1343fac46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE