DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0c88bcf47279b5ee8bd5de16f1843d92_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c88bcf47279b5ee8bd5de16f1843d92_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0c88bcf47279b5ee8bd5de16f1843d92_JaffaCakes118
Size
116KB
MD5
0c88bcf47279b5ee8bd5de16f1843d92
SHA1
03f9181e2a6f724650008469846814e102baea76
SHA256
c1118f2df836b951663c587b31ee63f84d7ae89fb8fc0c01580ab530e92fe5e8
SHA512
871e7cb0e16d81ac3605d6fc5fc1127594e788f027ef0323b922ff3a386fd160f369e0972d0a9909469406c3925014a83d8b3d3372c7573798f523c9c788662c
SSDEEP
768:Qb/hBQoi5qZO3QOSxodaCbR2Ala562sIJLwYk6R+Qbii/zyMZ/OPdGVs1CW9:C/jQv5qZWQ4NnYPhMFi/zfZWVGVs1r
Checks for missing Authenticode signature.
resource |
---|
0c88bcf47279b5ee8bd5de16f1843d92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE