DllCanUnloadNow
DllGetClassObject
dll_inject
Static task
static1
Behavioral task
behavioral1
Sample
fd21dcf8750f2224165e317526242281_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd21dcf8750f2224165e317526242281_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fd21dcf8750f2224165e317526242281_JaffaCakes118
Size
68KB
MD5
fd21dcf8750f2224165e317526242281
SHA1
8c50ee723a42163905d76fd1b0ef4427b683d6a3
SHA256
b2fb8c94c1fc0d5e9541d9a2c2361b7849d8a4784a367355a9836b21638ccda2
SHA512
d997e3c955aad673df3eb6b8a8ae6dabf7553df519b99d1270ee15930c671b4650d2b10109de7533f72b967e0c6ca385525c0d37c2ab061b319d2e30dd017a5c
SSDEEP
1536:ldsTDZKFQyF686QWViUQtlBUCxQjgVZyY:XsTDQJzUqBUMVQY
Checks for missing Authenticode signature.
resource |
---|
fd21dcf8750f2224165e317526242281_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
dll_inject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE