DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
cde0544c02cbbed7f37703817c4ad4a8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cde0544c02cbbed7f37703817c4ad4a8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cde0544c02cbbed7f37703817c4ad4a8_JaffaCakes118
Size
120KB
MD5
cde0544c02cbbed7f37703817c4ad4a8
SHA1
894995f0e6534c52ab7c0009d5f3391020a688f4
SHA256
1f530af3159e16f12d67fa7ec95d3d60f2f69e5ee814c20bfdfb711b772bf3d8
SHA512
897b1f27b98e9068d4948d914e7e90e13314db9f115c528b268cf301e9cce2997fcaa6dcd4bb6ddfbf1981ea8ad96d0fce70c291b6741c6599b3bc32075f36f1
SSDEEP
1536:oxqaQuoMIiNuyoxxTh5tRIriVwF9W4T6c+BQulRuv7zx:kBoMIEHQjRIOSF9Wq+Guox
Checks for missing Authenticode signature.
resource |
---|
cde0544c02cbbed7f37703817c4ad4a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE