DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
b4eae2c28fbff2bb3aa9e4755c1ef6ce_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4eae2c28fbff2bb3aa9e4755c1ef6ce_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
b4eae2c28fbff2bb3aa9e4755c1ef6ce_JaffaCakes118
Size
128KB
MD5
b4eae2c28fbff2bb3aa9e4755c1ef6ce
SHA1
cd0b8bdb1eb0e38f212ddd922a80c2eb4f500f6b
SHA256
b1019b3cbea612002f33bac45267e6ca178f74ebcdb0654e1dde86d4140790f5
SHA512
a9e6d34322350bb5c99752d0793d321782b02e024d7f4edc0b34ba7fb5bbe3ebf4c7668bf6765ed751565a5c268fd9ef97bac10bb10033ed46c7425b2216ffec
SSDEEP
1536:W5q/QowXO4YOnBTtSqPtHIlANSybRX0HoD:v5A73ZtltHIC8yFkHoD
Checks for missing Authenticode signature.
resource |
---|
b4eae2c28fbff2bb3aa9e4755c1ef6ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE