DllCanUnloadNow
DllCsiGetHandler
Static task
static1
Behavioral task
behavioral1
Sample
061e18cdcdea46756908f2c0d32237bb_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
061e18cdcdea46756908f2c0d32237bb_JaffaCakes118
Size
13KB
MD5
061e18cdcdea46756908f2c0d32237bb
SHA1
c1795399dbbf6be080904bad32568259569fcd66
SHA256
6517313a086a529523d8577e31a735a1a327a0393bfaf11a5df7d6e8f602253c
SHA512
053d3c85a89b83bf3f29279cac9034547e3661e49918d56f0cafaebd9d710e1dc22d1a756019b50299fa92e61ee0522235abb7b1abb521872205a90e0fc130fa
SSDEEP
384:VTPAggc3ELRPN6Zl/KIf4H/7ZxygvYp7WaeW:egtUtV6/KIQH/7nygv6
Checks for missing Authenticode signature.
resource |
---|
061e18cdcdea46756908f2c0d32237bb_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
GetProcAddress
OutputDebugStringW
TerminateProcess
FormatMessageW
DecodePointer
ReleaseSRWLockExclusive
LocalFree
Sleep
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
RtlFreeLBlob
DllCanUnloadNow
DllCsiGetHandler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE