DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
2615997619615289cbe256f95fcd56c1_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2615997619615289cbe256f95fcd56c1_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2615997619615289cbe256f95fcd56c1_JaffaCakes118
Size
128KB
MD5
2615997619615289cbe256f95fcd56c1
SHA1
61da39f960ad1e2f207b208ee980e8bd7acd6106
SHA256
a555800fe73e2256e80bb382fd40a8a1b1ef46c338ed973302871d9f75be75c0
SHA512
614e5d4ab523c073e367f83928905666f485bcf7f8b5a54268bb73a65483ebd2e5bb63da252a91a7dddaef9b22a6c6e68f1f6ef6a55e468f36a311d26211bb66
SSDEEP
1536:b55qwQVa8hLiU4lrz7PoDI+xeg0KMKeTA4wOuC0:bv6a6krXDg0KMKyYOun
Checks for missing Authenticode signature.
resource |
---|
2615997619615289cbe256f95fcd56c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE