DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
3f3df0d65de61267a59a1797b416e3e6_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3f3df0d65de61267a59a1797b416e3e6_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3f3df0d65de61267a59a1797b416e3e6_JaffaCakes118
Size
120KB
MD5
3f3df0d65de61267a59a1797b416e3e6
SHA1
8e0990dd09e215f338fe77003c7c95627048ac2b
SHA256
12e0d6bf44b03e39a44a10ac0e9aa50c0b607af92fbcaa4bf52c7b73b3ad7c55
SHA512
e8c1a11eca07c4a970ce6b0dae6b6810bf6eba76348545310baf07762f16359a8c1ceabc36732afbb844bf91e0443307e28b42a080ad8b6c9e864068cec0a3e9
SSDEEP
768:4ypq2QGrIi97ES6OG9rMXuzXExOvGKeRNuHBrVT8MMFSY44js5H1WTJpJoaldcS:vpq2QnUd6MaExIeyH3gOYBjK4JpiS
Checks for missing Authenticode signature.
resource |
---|
3f3df0d65de61267a59a1797b416e3e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE