DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bf7c292a3d5132b5d7354a2a89bbf23c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf7c292a3d5132b5d7354a2a89bbf23c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bf7c292a3d5132b5d7354a2a89bbf23c_JaffaCakes118
Size
87KB
MD5
bf7c292a3d5132b5d7354a2a89bbf23c
SHA1
54f175dd0007388840d1ba1fb1f395da26c0af18
SHA256
e6f444f1314b95dd26c839c9373745f4322b712942b84514131caabb168f5bc1
SHA512
8b00640f14d8d53fe8c8bc386c9ef09ec2cb21517558d8e46605c50d81c6ce2019224f46ecf94f334153e37b3ab2c54019357d1345c2de904dbfe4755deb6cd2
SSDEEP
1536:1n8Ypxj8F0Hq4Yrkbyprzmusz4rbaZo5lXoUn/Bn8xg5iWqU3y3qjm05bSpv1zK:13j8F9JrmyhjszUbt//B8xd9F3qjXkK
Checks for missing Authenticode signature.
resource |
---|
bf7c292a3d5132b5d7354a2a89bbf23c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE