DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
16b46890377d8d96acf8b71a6f7e19cc_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16b46890377d8d96acf8b71a6f7e19cc_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
16b46890377d8d96acf8b71a6f7e19cc_JaffaCakes118
Size
23KB
MD5
16b46890377d8d96acf8b71a6f7e19cc
SHA1
a3f7adb6426e2a9524fffc9c6de65c29a89af210
SHA256
4362c0c741af3dde9f617caf60db839a14d271dc0c6eaee0b313c9fb20564d0d
SHA512
a9240d57a403d08ddb9babc502ff603b967e67468fc8d173adfb43ba72f04c65bdd9f98148b0aece57bd09612effa065587248e9a93c8474dfa1db955762d8e1
SSDEEP
384:Woh4Mz1NC+gOC8dMjxCl1SzBiJsz3AC/P6LV9M06f2sOPxqmeiz7Y7vvxlLcWBz5:WBMzrgzjxCjSzPb/sMbeR9et7Dv
Checks for missing Authenticode signature.
resource |
---|
16b46890377d8d96acf8b71a6f7e19cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
MpHeapFree
RegCloseKey
CoTaskMemFree
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE