DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
2b4d2963d9dd56c8e1998a6147986507_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b4d2963d9dd56c8e1998a6147986507_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2b4d2963d9dd56c8e1998a6147986507_JaffaCakes118
Size
116KB
MD5
2b4d2963d9dd56c8e1998a6147986507
SHA1
79bdf65c8ed1cdde45caa6f54d3341ed18d7411c
SHA256
f813b8f4b0e770b5c0d534734c84a1b93dc95a1039145c6e7fcaa606096caff7
SHA512
626ce6a3d6eb5f4fccf0808769eda5dfff79aeb63e1200ca7f4da60944e097eb27fdc838717a0cafc9f388bce6930871e575d37febc7921a9fbeb384351c1cac
SSDEEP
768:mPJXFQoiRqZOxQqSyoJoChjLs4l4I5jmQP/gCRWHJd0WFQpOKDzfpMalPpB59xHC:mBVQvRqZEQ1TNRrmpGOKvBzhB595ohL
Checks for missing Authenticode signature.
resource |
---|
2b4d2963d9dd56c8e1998a6147986507_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE