DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
2eab9f7e15c6070588dc2e752a7a75ad_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2eab9f7e15c6070588dc2e752a7a75ad_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2eab9f7e15c6070588dc2e752a7a75ad_JaffaCakes118
Size
124KB
MD5
2eab9f7e15c6070588dc2e752a7a75ad
SHA1
01cd58dd099c4a6a6d8485aaad15a5ed2e11f9b0
SHA256
e03cf94135ae6a748394e97fcd9f86f17960527a49810d234f39ab74bf7319ab
SHA512
0754b2bc0f4bc1a31989319f9dd1a325c4558397666c477cf3c9538e2dee4a2d816edaba5b646d6835436125ada4bbd3c8c8c5cd06b0672f54ebfa89288ffdaa
SSDEEP
1536:wBqWQXVQJulFuogcgmh2Rl2+pdiY9c41SFu:YeCGuogVrl2+bz9SFu
Checks for missing Authenticode signature.
resource |
---|
2eab9f7e15c6070588dc2e752a7a75ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE