DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
fd79d7b9c6dc91b8d22ffbc777137be1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd79d7b9c6dc91b8d22ffbc777137be1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fd79d7b9c6dc91b8d22ffbc777137be1_JaffaCakes118
Size
116KB
MD5
fd79d7b9c6dc91b8d22ffbc777137be1
SHA1
37c73a6ed0cd2ee4dbfbbd0fd107eaa057699787
SHA256
1f54b43ed5387afe5c6fa7a950379874669a9b9481fee11ae048c348f7a8932f
SHA512
938773498b925265dcdbb3b3443582350ae7684a1f706f3cf99b5d97da02b164a01a0f646eea50c3a457e29e2e137807912e3b78d444a43bbc6ad351d5e382ba
SSDEEP
768:goiRqZO5QGSEoHMJ55y8ACpbIgfH/YRC3z1K9eLx16xyRB1eacTLLyojOleN0GcR:gvRqZkQjekoi6dto0RRQXNbQ
Checks for missing Authenticode signature.
resource |
---|
fd79d7b9c6dc91b8d22ffbc777137be1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE