DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
208a69c1b8c2541fd9278cb50817734a_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
208a69c1b8c2541fd9278cb50817734a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
208a69c1b8c2541fd9278cb50817734a_JaffaCakes118
Size
66KB
MD5
208a69c1b8c2541fd9278cb50817734a
SHA1
1f1c1fb901f80a28d856c64c64f8654bf8b13cce
SHA256
0a5effa749a9a3564edb03c52e5a576ec3d9d48c4afadb195b1c478edc6f25cc
SHA512
e37719898c6c52669dbdce9f1b48a2299e301400b5914dc2015690a30702e22960ccb0b24b078e5026e6649a3d83f70eb18b258b2c3cfe352f64daab3e5f7b8b
SSDEEP
1536:MRPhBstYkl68b04p/vTXaia1MSEH5PtUroBSD9X444UUwfR:MhhBsrb0ojaiOMSsxmuSF4BUpfR
Checks for missing Authenticode signature.
resource |
---|
208a69c1b8c2541fd9278cb50817734a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CoCreateGuid
SafeArrayPutElement
DpxNewJob
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE