DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
5e833b2f5b56554fe557e33627f9c018_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e833b2f5b56554fe557e33627f9c018_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e833b2f5b56554fe557e33627f9c018_JaffaCakes118
Size
116KB
MD5
5e833b2f5b56554fe557e33627f9c018
SHA1
d0de83645cc48c685c1a2da7f0e3f2bf8eb74a30
SHA256
0fae1face1ada4dbb856a0e158085533d4a72b9fc634ebd46a4d795e31a997b7
SHA512
5aa063c574d77b4b5ec6972534c95807a4308cc043dc0ffd2201dbaaf3d82ce38d6191e3fe184ce718515a415cbb7a5a75fd0242a537b3ea43fa00d8ec1af045
SSDEEP
768:goiRqZO5QGSEoHMJ55y8ACpbIgfH/YRC3z1K9eLx16xyRB1eacTLLyojOleN0GZo:gvRqZkQjekoi6dto0RRQXNbK
Checks for missing Authenticode signature.
resource |
---|
5e833b2f5b56554fe557e33627f9c018_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE