DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
bf8defc3a0b42d977c167bb1f3ed9033_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf8defc3a0b42d977c167bb1f3ed9033_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bf8defc3a0b42d977c167bb1f3ed9033_JaffaCakes118
Size
128KB
MD5
bf8defc3a0b42d977c167bb1f3ed9033
SHA1
970e732c3d144bea92fcd16a8b524c13513a09e7
SHA256
5e02b8ae5f23689a0152eec4ec20e0ee7b756f5323a356007460edbae1bd9c68
SHA512
fddf888978200245b07cab264acf8ac1831be7d1de2f24ccccf991e46ff5f0cda964c5c89c17f32ff6814dc211db7956b9354001c294e9e1178d71238be8fc77
SSDEEP
3072:0SL2+lfdHlEAskeGEGAmS2Uh4CUfAYoPZ:m+YZ
Checks for missing Authenticode signature.
resource |
---|
bf8defc3a0b42d977c167bb1f3ed9033_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE