DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
36dc691b57bbf6f841efc30c1429ada3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36dc691b57bbf6f841efc30c1429ada3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
36dc691b57bbf6f841efc30c1429ada3_JaffaCakes118
Size
120KB
MD5
36dc691b57bbf6f841efc30c1429ada3
SHA1
88c817ef764d2a754e5eda20117e7f90375e331f
SHA256
a78f417a2ab891b1b44203ee6c8c4f9c09028ecb7fa28689eba1144afa16a63d
SHA512
036bbea80a89a668cb0e0239b0f891db69d7e70a69d752d5984647094ce63cfab3a51a91104a5a560d13edb84a8dda729ff7bdc24e0d6e848e2ca181479a3b47
SSDEEP
1536:mORq4QXwgrtBwrntK2/UfXfD8L4isNvYZWWyDopB:mIQwgrQnkMUfI4ievYYWD
Checks for missing Authenticode signature.
resource |
---|
36dc691b57bbf6f841efc30c1429ada3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE