DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
2eede8bfc7456d1ac8c356c3c19a0f9f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2eede8bfc7456d1ac8c356c3c19a0f9f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2eede8bfc7456d1ac8c356c3c19a0f9f_JaffaCakes118
Size
116KB
MD5
2eede8bfc7456d1ac8c356c3c19a0f9f
SHA1
06533f44441ea99250f9bddcf26a5bcc822d6e73
SHA256
c1ef8275e459f4bd4d30e7c4c48d2fe529dfd0021e81bfe4217c7bb604e98fa0
SHA512
f77733a3290b9be31aeded5298faa310da00c3e3f179a3fa5c16b2b6354c4a75f9dd7fdb9eca86a2b0cc670bcfb93673080737932eef741f78fab8d5e8a33f19
SSDEEP
768:N1QoifqZOfQPSPonSCKtX2lvvUNj0IuTPby3+Jq8CBM4EwXGrrF5ZnG6v2uApYqJ:N1QvfqZyQJ2txC+78C9RWrrZt/5C
Checks for missing Authenticode signature.
resource |
---|
2eede8bfc7456d1ac8c356c3c19a0f9f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE