DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bf18e2fe0e3a63f9f442d7992e6d7371_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf18e2fe0e3a63f9f442d7992e6d7371_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bf18e2fe0e3a63f9f442d7992e6d7371_JaffaCakes118
Size
90KB
MD5
bf18e2fe0e3a63f9f442d7992e6d7371
SHA1
b9a8f6c3e57b96ac21f172b11a9ea6a24af9bf06
SHA256
95a50626d8a74ada81ca0dca51fc10ecfb5ccaa10658b7135faa542d1391b465
SHA512
1663c6417e9fb1b25feb7d181ec2aa732f17ef276ef2f50e5b80968af0c87b22c6ccadcd66fe41970ca46006d43d095de57b6123da0d22bf366a3b1aa9efd6a5
SSDEEP
1536:Kou/vxJ9PF2S5BmizkU1/K7WskUe+kYR4wjO5CGyGG11adftIG5gb+NC85PN:2/vxb5kiBKLDepyJR71avIGSaNd5l
Checks for missing Authenticode signature.
resource |
---|
bf18e2fe0e3a63f9f442d7992e6d7371_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE