DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
400ffd9324cda4086c1f86c4809eee14_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
400ffd9324cda4086c1f86c4809eee14_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
400ffd9324cda4086c1f86c4809eee14_JaffaCakes118
Size
120KB
MD5
400ffd9324cda4086c1f86c4809eee14
SHA1
b0a24dc6ab71557d859dfb15929053ce4144a677
SHA256
624beceab727b2dca6acaf8a8b74e2caa0972f52d0dfc65824df809e0a04d826
SHA512
fb7d1b9f1abe0fa8762d67e9b948b0566ad0244ed05ef7fdf501bb0d5e788483a3b7a62181a7f079b6ba79d832383ebaf24e062eeb66d1f62e1a759ce0748481
SSDEEP
1536:lORq4QXwgrtBwrntK2/UfXfD1L4isNvYZWWyDopz:lIQwgrQnkMUf94ievYYWN
Checks for missing Authenticode signature.
resource |
---|
400ffd9324cda4086c1f86c4809eee14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE