DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bcdd838d6d863fc24335e7b04f474d0a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bcdd838d6d863fc24335e7b04f474d0a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bcdd838d6d863fc24335e7b04f474d0a_JaffaCakes118
Size
167KB
MD5
bcdd838d6d863fc24335e7b04f474d0a
SHA1
81a59f900d84e6b12ab511448f4583c7fb2ec980
SHA256
14a40a03edb430b24a3433cc9d63a2f21a621c079fff1df94a28e88802c8fc3a
SHA512
83ea5677a9eca336e4b49af05fe19934d3656b1377e5d08a5e7c65282eb3d654aa251c92994f942e5dd12063db43ca1a7b80adeb327bcdf17ecdf15667d17bb8
SSDEEP
1536:tpOS9SuiZ/167lBnzCP3KwVgdvfphfZAxur45roUQdOcFPVS1y73es:MJsRpCPdVwphfZdr3ciPV973es
Checks for missing Authenticode signature.
resource |
---|
bcdd838d6d863fc24335e7b04f474d0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE