DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
62a15636fed4ce5ae13fab050d24a9ba_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62a15636fed4ce5ae13fab050d24a9ba_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62a15636fed4ce5ae13fab050d24a9ba_JaffaCakes118
Size
128KB
MD5
62a15636fed4ce5ae13fab050d24a9ba
SHA1
c399d5e8884c2884d593725a18dcb4c187f72e68
SHA256
a6e8daf5765f438e3b98af4268ec94018806285655fabc9e40e848f8615cb366
SHA512
55b344010f160d208af68f2de94acc2bc2f2a0855b40b61c502750fdf6fec5cc737874b2a8d2b02ed976a0ed849fd42821827aa763ccf054bb98b372c7315699
SSDEEP
3072:ZSL2+lfdHlEAskeGEGAmS2UhfCUfAYoPh:x+fh
Checks for missing Authenticode signature.
resource |
---|
62a15636fed4ce5ae13fab050d24a9ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE