DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
06ba1000f2b0623262d7a77d3acdc02c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06ba1000f2b0623262d7a77d3acdc02c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
06ba1000f2b0623262d7a77d3acdc02c_JaffaCakes118
Size
19KB
MD5
06ba1000f2b0623262d7a77d3acdc02c
SHA1
0b260c2076a9f8245fcf161b093229a2a3c4109d
SHA256
aa3c38590af6c111409f17f6a788ca222c248f0067c6c9172812f891bcc325b1
SHA512
c64f213d9f1fb53f0c0ac02cb1c705d696428b2ecf8f256ac67934ba85572d31808ea031c20764c68c4ce526e4bbfb30e46bc3f6af0f9680fe4d6a3100570ea7
SSDEEP
384:IWWTEcWitcf6WPo7a1VXoqoJqK0hSLD/DM2qlirrrOtuIuMf0Mu:jScCWA7a1V5Kl//DXkiyoP5
Checks for missing Authenticode signature.
resource |
---|
06ba1000f2b0623262d7a77d3acdc02c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE