DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
30772e3acf1dc946939345bf20f0abe9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30772e3acf1dc946939345bf20f0abe9_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
30772e3acf1dc946939345bf20f0abe9_JaffaCakes118
Size
116KB
MD5
30772e3acf1dc946939345bf20f0abe9
SHA1
3aec4f0b4dc2d0de31a81ae32a3eb29e814749d7
SHA256
e971245378c19f9902fdccc6edbb0a8d5bab49c930ca779cd5bde989527b16d7
SHA512
bd2c6c7e69e6ca0cc2230eb972a35fb1823164fb7620c6d1ac82b79c33186104636dab250eb702c652e17c5448644b427e0cf026056a2469f38e6f52cc2f57a8
SSDEEP
768:h1QoifqZOfQPSPonSCKtX2lvvUNj0IuTPby30Jq8CBM4EwXGrrF5ZnG6v2uApYqd:h1QvfqZyQJ2txC+Z8C9RWrrZt/5G
Checks for missing Authenticode signature.
resource |
---|
30772e3acf1dc946939345bf20f0abe9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE