DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
412189c647d5e4974954e2a68d7ae018_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
412189c647d5e4974954e2a68d7ae018_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
412189c647d5e4974954e2a68d7ae018_JaffaCakes118
Size
120KB
MD5
412189c647d5e4974954e2a68d7ae018
SHA1
daa6e206395824dd992e8f3467b60a73f47814c6
SHA256
022d339095406bc0ea642510f33bb759187274d24ac634e93cc25f1b24a36d55
SHA512
bee1de34c66845e79de3ee13613fd6965ee112d7daa01b7827f7c82d04d6dbe656a4edea6f5d061455e161da50a0e4dd0e21bdfa2bfb65153a449f17b6a7b37b
SSDEEP
1536:qNqMQlu4XMKTwjaDKj+VeK6GV6P19UCRg1gOVAG:wmu4jTwj1JKhGgCRgaG
Checks for missing Authenticode signature.
resource |
---|
412189c647d5e4974954e2a68d7ae018_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE