DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
066e6c90afb04db7744e907b98224c8d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
066e6c90afb04db7744e907b98224c8d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
066e6c90afb04db7744e907b98224c8d_JaffaCakes118
Size
120KB
MD5
066e6c90afb04db7744e907b98224c8d
SHA1
c9137635fd4cf7d41f16e0beeb26b28c33f57b98
SHA256
def54701a0b6547fd54573ce1cd4c3f4c3fee27415431c7dfb3c7843d2238f9a
SHA512
2002078a8c0311052c93a0e68b33d973d447e16245cbd56eea81338fbbb2d978b6b469436beffe59060a3c3af23329093a95b788f7f1c8a5ced50469b1a18b69
SSDEEP
768:1yJqKQ46jNfYzkDj0tp8FJodmTt65rjCkNNyQj9aCiNxxeyercVMgYkCl:UJqKQpZf8O0nvmTKvCkNdj4C+xnoc6Bl
Checks for missing Authenticode signature.
resource |
---|
066e6c90afb04db7744e907b98224c8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE