TxfGetThreadMiniVersionForCreate
TxfLogCreateFileReadContext
TxfLogCreateRangeReadContext
TxfLogDestroyReadContext
TxfLogReadRecords
TxfLogRecordGetFileName
TxfLogRecordGetGenericType
TxfReadMetadataInfo
TxfSetThreadMiniVersionForCreate
Static task
static1
Behavioral task
behavioral1
Sample
43b5a11dd65d7a9b928ff1ffb10e964b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
43b5a11dd65d7a9b928ff1ffb10e964b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
43b5a11dd65d7a9b928ff1ffb10e964b_JaffaCakes118
Size
8KB
MD5
43b5a11dd65d7a9b928ff1ffb10e964b
SHA1
9ac93887fbb51a0387e1e6ecf04e6426611237dd
SHA256
785860600e3aef0214fd840ab14d4f8e5f5acdf819542ea35ac7da5c37057646
SHA512
f0df454a623d320e7221eb2e5e570e794e26d80c556fb1f533e6372e1ec06f9154016adb00206cea12cc378f5be0b7e283bd0273fceb2fd49540a356af9e986a
SSDEEP
192:lFPmSzCvc+TZfGK4SYmtLrTsGpCgO3YppW59NW:lFPmSzwcyVGBSppKYppW59NW
Checks for missing Authenticode signature.
resource |
---|
43b5a11dd65d7a9b928ff1ffb10e964b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
NtFsControlFile
CreateLogFile
TxfGetThreadMiniVersionForCreate
TxfLogCreateFileReadContext
TxfLogCreateRangeReadContext
TxfLogDestroyReadContext
TxfLogReadRecords
TxfLogRecordGetFileName
TxfLogRecordGetGenericType
TxfReadMetadataInfo
TxfSetThreadMiniVersionForCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE