DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
17638fff35620eeb5102206bc60a0096_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17638fff35620eeb5102206bc60a0096_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
17638fff35620eeb5102206bc60a0096_JaffaCakes118
Size
21KB
MD5
17638fff35620eeb5102206bc60a0096
SHA1
8a3243ed1d090ed06f9e2f9f6fba25da7bd08152
SHA256
a74a5d60e9acfbd86b1b43a035a79eb5689741d911841559f4e63e4e3d68c51a
SHA512
6f5c35a50189580abff646c7a8c7070dd8c436817ad1dacd25019d14c773739bf36a009403ad3a2a1dd45d24fd587dab328f96346ce239b3c02b6228cd654d9e
SSDEEP
384:uWWTEcWV4KCMbOTvfq8bUijzBncb4aAjUNlB9LtU66Og+KDqU1v6D8A8+:FHCf3qKUihcoJHO9UdmnB
Checks for missing Authenticode signature.
resource |
---|
17638fff35620eeb5102206bc60a0096_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE