DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
3ab8c58eb7e22136fc54f53886104c9c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ab8c58eb7e22136fc54f53886104c9c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3ab8c58eb7e22136fc54f53886104c9c_JaffaCakes118
Size
120KB
MD5
3ab8c58eb7e22136fc54f53886104c9c
SHA1
8739bcfdf6aba62bad70ef101ab592e9172d7173
SHA256
01d016568f368fec615e1576fbb8a82fe2d94ae7da798de73d41b817dcbe3169
SHA512
1d314194b746e0534be1e3df2ef5e0eb17d501179140c3a3e0b34a58c0183be03e93a930a3eb8959929fdf4a180037e99ecfd743f1c33939357b51724a3c4877
SSDEEP
768:K5tayhq4QC+IcV4bbVPt8+5bKi5OZvdczmwwR8sWLN45YmvOHuZjdAWwCSXBJeUG:uhq4Qcemp3z5OZL8F45TOShAuSxJeP
Checks for missing Authenticode signature.
resource |
---|
3ab8c58eb7e22136fc54f53886104c9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE