DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
01c13ab2b7ed8133e8f434de8336a115_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01c13ab2b7ed8133e8f434de8336a115_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
01c13ab2b7ed8133e8f434de8336a115_JaffaCakes118
Size
19KB
MD5
01c13ab2b7ed8133e8f434de8336a115
SHA1
61aaf83e1066729fada733b6999f7676065d072b
SHA256
872f72fffcd634e88f2fcfda094dd4cf2df4cead3eaf63a643ad42a69f855782
SHA512
335ba3657536882c312f4b2f6c3a2674a3321118f91538d7b34e872c40bc803dd2d8108f232fc4d52669824229bafc73f2909e5b11cc47a98bc49a1f0d6c7598
SSDEEP
384:tWWTEcWS8XgSiz3+g7wwfT/I+PtCZeCwLg2zGNnQoW7TFyyQw7TeLs8OzTI:ioYgfz3f/r/BCwU2zGNnu/UDE8OQ
Checks for missing Authenticode signature.
resource |
---|
01c13ab2b7ed8133e8f434de8336a115_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE