DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
63d068fcef1fb8efdbf595c604a43329_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63d068fcef1fb8efdbf595c604a43329_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63d068fcef1fb8efdbf595c604a43329_JaffaCakes118
Size
21KB
MD5
63d068fcef1fb8efdbf595c604a43329
SHA1
cb1b242b9dc299e84f142da0966f5c51bc827d92
SHA256
a5afb7d88c2e43df4fed08e59decbfabaec13721613c59e07c83fc5909ac513f
SHA512
e65c58a2b1b4475a43fcdf1a0471b9bca0f85260faee320046b425408ff65e761b7ed731ab8a5fb864f548c460926744e0c0a5a8316532ea96cf526e68dcdf1f
SSDEEP
384:cwWWTEcWy9ifpgCEFLpinxGV7g2sc37r/7NjYJqHkzsp+l2wZn9d+k7xEvCEkFiw:c7E4prEFLBqEYUHkzs22wPLevyMoh
Checks for missing Authenticode signature.
resource |
---|
63d068fcef1fb8efdbf595c604a43329_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE