DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
03839764578945a0e7db87074f10c1a8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
03839764578945a0e7db87074f10c1a8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
03839764578945a0e7db87074f10c1a8_JaffaCakes118
Size
116KB
MD5
03839764578945a0e7db87074f10c1a8
SHA1
41b2ed35b29ebb76dd9dcf6bd85bc0c46efc839f
SHA256
e72b19a5c6cb3bf066bf85f577446ada9577f4a41351372ccb0bfd9805eae86b
SHA512
191ace4ace47d58da4ea5ef84729bcc8ff717ec5f330e9a87c25db2537af19c756c9502ddbbdc619340663e64f9b272ebe7ca35179a69bb3a1e0d699ba1c6fbc
SSDEEP
1536:+CiJAvdqZOQvIBzazLs/DQLrufK8KXwR4NRw:+CEAgOVz4VrufK8AwRURw
Checks for missing Authenticode signature.
resource |
---|
03839764578945a0e7db87074f10c1a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE