DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
3062dce23885b90ba10c1d9f60fbbd0e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3062dce23885b90ba10c1d9f60fbbd0e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3062dce23885b90ba10c1d9f60fbbd0e_JaffaCakes118
Size
128KB
MD5
3062dce23885b90ba10c1d9f60fbbd0e
SHA1
f2bd35dee10023a5bc8a326b1a4ef59665d5d2d7
SHA256
fa8b1e748d1d82b722c515c24d12b27a89239c33e56e24bb810737b9502d615d
SHA512
8ac0a676d24e18d9d9ca8517eb34c9060486d06d3f42c26d4ca18c3339e20f7932753bf7dfe537038fb15651e5d78e0fc985c92f9920d628e09bee5c41459c7f
SSDEEP
768:XmCRqAQb1at2LpYG0upAfhncv7wTG6jgv2HOdwnOYCYNmyAhN682CX8NxFF:xRqAQpy2LpY61gja2HFOq5AT682CX8F
Checks for missing Authenticode signature.
resource |
---|
3062dce23885b90ba10c1d9f60fbbd0e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE