DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
2b2be35f5bc15e0087c07bf5a2ace895_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b2be35f5bc15e0087c07bf5a2ace895_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2b2be35f5bc15e0087c07bf5a2ace895_JaffaCakes118
Size
128KB
MD5
2b2be35f5bc15e0087c07bf5a2ace895
SHA1
38e829ec29c506a18f5f95bb5864fbdca8149446
SHA256
f4474383970c8047f832855c4ef356b3b92a002b199466c76cd1038c05a7f8ee
SHA512
d30d4aefeea7959ebe21f697f86809799c7291b833226471de02c657c9aead8add1696fb2bd661452db2a23554975bb92f498092aef74d1feb7d29acfece93fc
SSDEEP
1536:+2qfQhhLS8AVbhJJv5GkI2jqQsT+9ZuSqabg:8Qh8VDJQkI8EgZuHabg
Checks for missing Authenticode signature.
resource |
---|
2b2be35f5bc15e0087c07bf5a2ace895_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE