DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
2a8601863ad32a98d9e71274a9d9c417_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a8601863ad32a98d9e71274a9d9c417_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2a8601863ad32a98d9e71274a9d9c417_JaffaCakes118
Size
116KB
MD5
2a8601863ad32a98d9e71274a9d9c417
SHA1
2dfda3cc8015d1f06fc79de516cab40c8af62dbe
SHA256
d7c3f4ae890e0388cdbc6ca8f4b7ab2f1fc6b01367396d11d953a1d3ecfea0d6
SHA512
c951bd4fbaab36dce78e1f6c91a9e99aa47f1efa5d119519c62050df0e48655d4dad4984740c89f1d3e1380ae3ae75d8e0474135c112eb3ac276185f669a4d75
SSDEEP
768:bRoiMoqZOpQGSI9o/fFz1y85pN7HpB5D29msJ/3LcFkb0/BVEt2tvJHyEIRlJ5eY:lvxqZoQee1H4RJTcFfpqtYJMlPeBIj
Checks for missing Authenticode signature.
resource |
---|
2a8601863ad32a98d9e71274a9d9c417_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE