DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
859348e4535de193321f59e497a7fb15_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
859348e4535de193321f59e497a7fb15_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
859348e4535de193321f59e497a7fb15_JaffaCakes118
Size
116KB
MD5
859348e4535de193321f59e497a7fb15
SHA1
4a3a91c4588131da4bcfc0b763a20da716274190
SHA256
cf1837eadf4f02fdafbe7b769613f3416a7f0daf42877f0b57a90e9dd29c0dd8
SHA512
61b08bddab555acec5763ba2791eeb24a17828b6bed2b6180c3cf404a3a99728a74ca8bda3b8951759ab3235d1bde11bbecc93f5b0dc97bb00551d2e104cbe11
SSDEEP
768:N1QoifqZOfQPSPonSCKtX2lvvUNj0IuTPby3+Jq8CBM4EwXGrrF5ZnG6v2uApYq7:N1QvfqZyQJ2txC+78C9RWrrZt/5E
Checks for missing Authenticode signature.
resource |
---|
859348e4535de193321f59e497a7fb15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE