DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
b581cea816d4a25f79ba2a6ad992647e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b581cea816d4a25f79ba2a6ad992647e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b581cea816d4a25f79ba2a6ad992647e_JaffaCakes118
Size
116KB
MD5
b581cea816d4a25f79ba2a6ad992647e
SHA1
12581f463120ffe47cf9a73cbae827651c2343a1
SHA256
f33305e1095fda88e1756ea82aaab9c4b0a7003e030626fe4d82edcf3f3785f3
SHA512
fae03050cacf5ab0cc5a41253b118e2f6d8696401abf9e1bc4139326f9a7a2e4a0673a8b44abb12221ae4607f86b9a62d8c0b41335ad0b734cfad4c8f6965b08
SSDEEP
768:goiRqZO5QGSEoHMJ55y8ACpbIgfH/YRC3z1K9eLx16xyRB1eacTLLyojOleN0GSD:gvRqZkQjekoi6dto0RRQXNbQ
Checks for missing Authenticode signature.
resource |
---|
b581cea816d4a25f79ba2a6ad992647e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE