DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
576cb8122d664ecc01397a3976f988ca_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
576cb8122d664ecc01397a3976f988ca_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
576cb8122d664ecc01397a3976f988ca_JaffaCakes118
Size
128KB
MD5
576cb8122d664ecc01397a3976f988ca
SHA1
1185afdebcd7f6b9fad5c8bcafc4bab6ea28e71e
SHA256
e1e3f395c70ebb259744c4df122316be2e70fa943e4adc58cb129e86ef3e32c3
SHA512
18687164d80ef27db8bc1bbdd080fc118257f19dd894a1152842a78f17d63c9bfd8429f36def4eb80e03e611d47d399ff31e257c8634289ae7ee7259818f3d30
SSDEEP
1536:O2qfQhhLS8AVbhJJv5KkI2jqQsT+9ZuSqabI:MQh8VDJAkI8EgZuHabI
Checks for missing Authenticode signature.
resource |
---|
576cb8122d664ecc01397a3976f988ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE