DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
17054ec1f7bd518dca93444ffa0ae844_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17054ec1f7bd518dca93444ffa0ae844_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
17054ec1f7bd518dca93444ffa0ae844_JaffaCakes118
Size
132KB
MD5
17054ec1f7bd518dca93444ffa0ae844
SHA1
8ea189ea983a9441f973a9224209154ec427af57
SHA256
e4b2d97b9e2db2558f78d1ee7df1edaf47ef989276350212a42e778ca63ddb21
SHA512
57e7e14cde2df0a59158df2e403c24b38a6e762520a69c8fe56d3ffa8177d7b76117df3b0d696d164302ea580e1967e9fd22e0e4f1930514c5966847a8b9bf92
SSDEEP
1536:efAMqf9aQyY/XD8cHJLgZNzILqvEtGR3f:uAEcb9H+ZKLqMEZf
Checks for missing Authenticode signature.
resource |
---|
17054ec1f7bd518dca93444ffa0ae844_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE