DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
52d28de0f1c506ea2492f956b031750d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52d28de0f1c506ea2492f956b031750d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
52d28de0f1c506ea2492f956b031750d_JaffaCakes118
Size
120KB
MD5
52d28de0f1c506ea2492f956b031750d
SHA1
f2d983fff98432a5321b35640846a56b9d9b4f65
SHA256
cf141c983761a150ddf9d5c10e34135b432c2baf3155eb1a48b34df168433b98
SHA512
a19f78c154aba4e086caca4de1a07ceafc26eba9f60fa9668d7dd9a1b299310c11bfe1f29bc295ada62019f0ba3fe27f4e4d8f0b1e2cec8fa5bf5533162baff0
SSDEEP
1536:B+7BqsQc1tQOYTiew5i/uz5xpLHxuPb0QeijLcG:ul1vYuej/uNxpLRuANijLcG
Checks for missing Authenticode signature.
resource |
---|
52d28de0f1c506ea2492f956b031750d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE