DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
12363a54e4e20a4cb526504a8525f5a2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12363a54e4e20a4cb526504a8525f5a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
12363a54e4e20a4cb526504a8525f5a2_JaffaCakes118
Size
128KB
MD5
12363a54e4e20a4cb526504a8525f5a2
SHA1
444d2a114ca9a78b64560d28394cf2616d46244e
SHA256
0627e6b4c56734d6664aea7e6ee5a79847b5b79d3116d4a48565052648794afe
SHA512
3997f5bbd36ad5c62eaee7ccf4bfa26456879c74a5b0e973ad0a7ebfca716e159048eb40997b5124ed3ca1e357078dea05c788bcef73541e81f001825d91b33f
SSDEEP
1536:eJqKQjdDBUhxX+crmbuY4KA5tUNgYzBxgYl:uCx0YcrmbuY4FvegCxgYl
Checks for missing Authenticode signature.
resource |
---|
12363a54e4e20a4cb526504a8525f5a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE