ConfigStartMenu
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllGetVersion
GetProgramsOnline
NewLinkHereW
RunFODW
RunOCMW
RunSPADW
Static task
static1
Behavioral task
behavioral1
Sample
1e3a6e5538f972b402842949e3a28e31_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1e3a6e5538f972b402842949e3a28e31_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1e3a6e5538f972b402842949e3a28e31_JaffaCakes118
Size
392KB
MD5
1e3a6e5538f972b402842949e3a28e31
SHA1
68c7f1d1937240a771561e3aed0fa978ca757d68
SHA256
f6ed1f0968da100209de23ca8c56c5c4a279aeedcf6387965783f8269dd31c45
SHA512
40e50e4e9b90c65dbb5452cc490ac879cc90958e8b1b6cc6be68b92bfee4674df3217e359277d2e8454a0ebac1ea1f33bb4f3cb5b8ca1c14b9319e72a5efe4f3
SSDEEP
6144:IRD4MlqMABEN37jt9ZA3H8DaLCw0w6LhMA8aF8pVqEDFqf1b/3C:IRZQOrcHwwH6tMzaFg8EDcf1r3C
Checks for missing Authenticode signature.
resource |
---|
1e3a6e5538f972b402842949e3a28e31_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
__chkstk
StrStrIW
mciSendStringA
waveInGetDevCapsA
mciSendStringW
midiOutReset
waveInGetDevCapsW
midiOutGetDevCapsW
auxGetDevCapsW
waveOutSetPitch
midiInStart
GetTopWindow
CopySid
ConfigStartMenu
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllGetVersion
GetProgramsOnline
NewLinkHereW
RunFODW
RunOCMW
RunSPADW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ