DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
15401ed249e9e77160d35a0a4e688bdb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
15401ed249e9e77160d35a0a4e688bdb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
15401ed249e9e77160d35a0a4e688bdb_JaffaCakes118
Size
128KB
MD5
15401ed249e9e77160d35a0a4e688bdb
SHA1
c31f247c049dbcd424cd6c7a5b27ca247b227ebe
SHA256
06b8f78d191cbe321687dd7028f5b42ba112953b77969f96ddc5812500902213
SHA512
c7fd6e569896ba064ddc5a32cb332d189bba9ed7a921ae4a78aa3b74379c31202eb7478fb5922bb0e4462307a8b702338a7a1ad48f2a27f0af65419c6fb0b949
SSDEEP
1536:slmqhQ2aLjwHhoOCQtP6auWaQjpN2TooGYt+DvE2q/q:sNbaQqOLtP6gaQjpN2T8Yt+TES
Checks for missing Authenticode signature.
resource |
---|
15401ed249e9e77160d35a0a4e688bdb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE