DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
000613d7328d195fc060ae7494833ffa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
000613d7328d195fc060ae7494833ffa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
000613d7328d195fc060ae7494833ffa_JaffaCakes118
Size
18KB
MD5
000613d7328d195fc060ae7494833ffa
SHA1
b2a4b523bcd2bda14dbeb9b634c86b642cd5b336
SHA256
c537967b18f67c793fccbdeba4797cf8283376fbce6c6deb5b1e15f80a14c9a1
SHA512
24c24ae9b7a0aadaceade73aa809db020f7d86549b57cddb4b4830e920ee0af0b4ebc317c48a8254179ad35e776acb775073a7f6a564c4c3d6ad9ba0dcda13b1
SSDEEP
384:GWWTEcWSEyTNO+hLi+j3fOW5rbEalzjD1Bsw9xXqb0l6oYLh1tMcSO7tWBh:tQpOKDzfpMalPpB59xHehvSO7En
Checks for missing Authenticode signature.
resource |
---|
000613d7328d195fc060ae7494833ffa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE