DllRegisterServer
DllUnregisterServer
StartW
StopW
Static task
static1
Behavioral task
behavioral1
Sample
fe3a341abd87bee03cfd10ed0abdf7a5_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fe3a341abd87bee03cfd10ed0abdf7a5_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fe3a341abd87bee03cfd10ed0abdf7a5_JaffaCakes118
Size
325KB
MD5
fe3a341abd87bee03cfd10ed0abdf7a5
SHA1
b0a500f841cc1c0e8e2fc48732390fc9486ab7f3
SHA256
3937e1a818e42cef7e8ef4697f290c945485cd06017ebb14a51101a1f5168964
SHA512
603eeb01534d3b16b760bbd158ddd009b22bbea3f86c232065d45210d6ad73f8780196e6739a266e523b30a5fd55496a6de2a4803e276ddab899f8d117052074
SSDEEP
6144:yYFxGa6+jTluQDJVoHIZ0z7PW0uet1hjdweUt7DTxzP9:yUj93VGHcey4DdY1z9
Checks for missing Authenticode signature.
resource |
---|
fe3a341abd87bee03cfd10ed0abdf7a5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetSystemTime
DllRegisterServer
DllUnregisterServer
StartW
StopW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ