DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0142b05879ddf22ecc4eb0829c4aad03_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0142b05879ddf22ecc4eb0829c4aad03_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0142b05879ddf22ecc4eb0829c4aad03_JaffaCakes118
Size
18KB
MD5
0142b05879ddf22ecc4eb0829c4aad03
SHA1
9d8d129c632d33daffc0c4c8ec2c5a71977cf868
SHA256
01a86dead55f00676e0eb5f3aa5807c05efcdba000e1b71ed04c95eef37f8bc9
SHA512
8c0f2b3027c6234245d49a761fca60695a85108cba65cea0008b4d49272a295701c1b2d178d10418b79c9d4df65d60b4cd8cdbacff2f09e1ae730bb218677c4e
SSDEEP
384:4UWWTEcW8Z2nbL3To/SDQy8iDARMXebKY6J9jcVIONlgeyGhPkJbHSFgjqwo:4/qSDFLeV6JZ2IOcGCJbHSUo
Checks for missing Authenticode signature.
resource |
---|
0142b05879ddf22ecc4eb0829c4aad03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE