DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
414ffdabb1bcbb474e099efda1f19206_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
414ffdabb1bcbb474e099efda1f19206_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
414ffdabb1bcbb474e099efda1f19206_JaffaCakes118
Size
128KB
MD5
414ffdabb1bcbb474e099efda1f19206
SHA1
25100000460e07fa590c7b12c0a8ee26a868a3f0
SHA256
19cf608fcca602be0f19d7f4558f463de1714832a1c412e65bb8a64266fd52de
SHA512
8cc18a7f00edb28bb77c8edccdba23e6cbfd3381623c485599c063e3801214c843e5afa2bd0dbe956c85dcb78cefdabf5f55c232ce29ea0008b8cef0277d1180
SSDEEP
768:H2fCZqoQO8obQ0xJTK229keAdhrIohbtyN17a7XOueWHCf3qKUihcoJHO9Udmn5:HrZqoQybQ6Thhr1bc17azHA6BKr89Uq
Checks for missing Authenticode signature.
resource |
---|
414ffdabb1bcbb474e099efda1f19206_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE