DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0d1b551bed9200fd98353f52f49d72b6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d1b551bed9200fd98353f52f49d72b6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0d1b551bed9200fd98353f52f49d72b6_JaffaCakes118
Size
120KB
MD5
0d1b551bed9200fd98353f52f49d72b6
SHA1
3a93c1b0d797bbe30f0f553fe4345de947d0b9da
SHA256
dedfce5f5691f00fb130cc619dbb828e5a27759a85c853669b1f556629cdd850
SHA512
124d8102d31df8ed3a798145f391c0bc5aa17309abaa935b31651fb3e52cecf1aabb81f8687b4d0cf851e95533349ac4bccddaba2270621c40ded5b09ec5805b
SSDEEP
1536:mZqAQ51LXJ2xPyv80tztOy5AKf5zPYuje4ygvsz5L:cY1L0SadGD1N+
Checks for missing Authenticode signature.
resource |
---|
0d1b551bed9200fd98353f52f49d72b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE