DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
5c22068f9dd87a752cce847d13472d13_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c22068f9dd87a752cce847d13472d13_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5c22068f9dd87a752cce847d13472d13_JaffaCakes118
Size
128KB
MD5
5c22068f9dd87a752cce847d13472d13
SHA1
0578df560d54c8a66025d6289f9a585e4b5a2aef
SHA256
2395061e6568f7c8084d90e0875a6bd55fc9b145ba92761843f4f83b07c89782
SHA512
f84a659d91823a7dbe9036e1082c74ad07a4f1e7b71b0d828e6b5a557b6aed0612f91a339fbb2335a8691d8982031f04dd9ad2a237521ecc632073f0d6995efe
SSDEEP
3072:0SL2+lfdHlEAskeGEGAmS2Uh4CUfAYoP3:m+Y3
Checks for missing Authenticode signature.
resource |
---|
5c22068f9dd87a752cce847d13472d13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE