DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0dcb6422b9fa1a4ef01e24a7db816fa5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0dcb6422b9fa1a4ef01e24a7db816fa5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0dcb6422b9fa1a4ef01e24a7db816fa5_JaffaCakes118
Size
116KB
MD5
0dcb6422b9fa1a4ef01e24a7db816fa5
SHA1
bd6908dd7b0b9ec6f76f748a6e1fe1dba293557d
SHA256
ec11ca62470af3769ff10eca1f0eb45ac41f4e45648cd5c178dc10cbe34c16c5
SHA512
e2aad79055c4a7a0783b27b36eb3eaf11587c124480c2beb743f3be73a081f611f38e543f099309c8cb89adbe06642490f827c85019112b92c2ac24b5cf2a908
SSDEEP
768:goiRqZO5QGSEoHMJ55y8ACpbIgfH/YRC3z1K9eLx16xyRB1eacTLLyojOleN0G5o:gvRqZkQjekoi6dto0RRQXNbe
Checks for missing Authenticode signature.
resource |
---|
0dcb6422b9fa1a4ef01e24a7db816fa5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE