DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
410d8de039e60054294fe81f5f646725_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
410d8de039e60054294fe81f5f646725_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
410d8de039e60054294fe81f5f646725_JaffaCakes118
Size
120KB
MD5
410d8de039e60054294fe81f5f646725
SHA1
ed489438083dc0e3b06ff4cc3626fd9d1dae8e89
SHA256
7379f353408dc76d77466d23d80cad539d660f3165ede859bf843d52985016cb
SHA512
c3beb4ac527c99e665e341de38b1b66fab8e4789cf718f002aa9cda1c45a942425454d4a352a8501a988f733dd9fe8d5af8b624dbc5a35597dd7cfcb61ddea30
SSDEEP
1536:IoqWQ4AAp40cfnUkN2NxQVbtAXBXoyoOKNz78a:dxAN0mUdMAIP7z
Checks for missing Authenticode signature.
resource |
---|
410d8de039e60054294fe81f5f646725_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE