DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
09e8adf61adc6a0887dddf452d74d3d7_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
09e8adf61adc6a0887dddf452d74d3d7_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
09e8adf61adc6a0887dddf452d74d3d7_JaffaCakes118
Size
31KB
MD5
09e8adf61adc6a0887dddf452d74d3d7
SHA1
3376165948975377afffc9f9f05bc0d807d0f519
SHA256
dec2b3250ed238fc2aafe368ac96e021d154f363d1a430895f5880b163aa94d0
SHA512
52da234459f562d19a36817ed3a9bed5691c44f0da14950dcef1e20082a3032118dacb5a019d83c666cb5814988608e594943e22e0c521cb6d67d69093685a95
SSDEEP
768:EUOT48JCjiWWP5AKIAvqeyyZ3ZIxLahZl7DV:EUOTFJCjiXOKIAyVyMJA
Checks for missing Authenticode signature.
resource |
---|
09e8adf61adc6a0887dddf452d74d3d7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RtlUnwind
LoadStringW
CopySid
SysFreeString
CoTaskMemFree
ord219
PatBlt
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE