DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
02a8bca333c1370ff99efd33671b4609_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02a8bca333c1370ff99efd33671b4609_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
02a8bca333c1370ff99efd33671b4609_JaffaCakes118
Size
120KB
MD5
02a8bca333c1370ff99efd33671b4609
SHA1
c8ca97f7a95115b1b7f806b1ccf4232333691450
SHA256
c4aa10097b2bd13eb19bfa43b123789ab9b06eb42ea0b36d362f6159edc07c7e
SHA512
8adfa9b69cafabc010175f38e0c5af47e771ace6579179f61784b63235a079a9e48a6dcf6142bf568760598ba2a4f17adf6f427e95640cafffd36c1717117728
SSDEEP
1536:7ZqAQ51LXJ2xPyv80tztOy5AKf5zaYuje4ygvsz5P:pY1L0SadGu1N+
Checks for missing Authenticode signature.
resource |
---|
02a8bca333c1370ff99efd33671b4609_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE