DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
3c6e65362fc478d96bdf7630bb6bed80_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c6e65362fc478d96bdf7630bb6bed80_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3c6e65362fc478d96bdf7630bb6bed80_JaffaCakes118
Size
116KB
MD5
3c6e65362fc478d96bdf7630bb6bed80
SHA1
40302e42a6f7355c1092085f1f1ad9bfe3391a38
SHA256
59998a8ce6e46ad9ea021c17bed26173b34b2476bdaae649e389c2eda6de9934
SHA512
bf483ef8781139327d6b9fe1ae9f62bd7ca9ceba5af2795870223ef2509c7184ce26412c126645be2d4f52a2c1a664898c3d942cf9027239b2ebdc453779c2e9
SSDEEP
768:9RoiMoqZOpQGSI9o/fFz1y85pN7HpB5D29msJ/3LcFkG0/BVEt2tvJHyEIRlJ5e+:fvxqZoQee1H4RJTcFWpqtYJMlPeBI5
Checks for missing Authenticode signature.
resource |
---|
3c6e65362fc478d96bdf7630bb6bed80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE