DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
12932c8750e691bff938cc32ba2d7124_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
12932c8750e691bff938cc32ba2d7124_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
12932c8750e691bff938cc32ba2d7124_JaffaCakes118
Size
93KB
MD5
12932c8750e691bff938cc32ba2d7124
SHA1
6f31008ce013d91b8914bf82da14cee2093c648b
SHA256
50796505e480251b2fb32219b4eb13d4558c9a284828891eb4fed74ac0a44c2f
SHA512
bdff232ed9c6a08bcfd8d52d821926d3e2ddbbd2ca9fb6cd57bfe17fb9955cc6ebb6c1c8191b41c07e102ea59da6e59d8131f261c82a0571557e4baaac510a16
SSDEEP
1536:5Jw1MxHJhicA2gGJtutcxWJ0yAVZHLzwl4Qx5SikRRWDUQHHLiakchDZ37aKxhmb:/DicA2gwBzI4Q3VGRWzLiat37ZU
Checks for missing Authenticode signature.
resource |
---|
12932c8750e691bff938cc32ba2d7124_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RtlUnwind
ord159
GetDeviceCaps
GetDC
RegEnumKeyW
ord158
ord9
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE