DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d0fec626ce0b6420bff6b86b1746be0_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3d0fec626ce0b6420bff6b86b1746be0_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
3d0fec626ce0b6420bff6b86b1746be0_JaffaCakes118
Size
53KB
MD5
3d0fec626ce0b6420bff6b86b1746be0
SHA1
85b1e0fa79d1121790f60c7204b40fc73c783f27
SHA256
b5eb54ee4f0bb02319ded1de59481ddcbf4a876a993432ea01b3551444dc87c8
SHA512
37e1c6056863fa9b110f49b0a8d7906a37dbf6bbc8b31994a8f2bfada4843f82aaa24787c06a48a5ab2ccda26190560e550d979c675308e51ac4ab444d8bdc8e
SSDEEP
1536:m2ljWtN0P1z4UAzvJeUFhKIfZwTybMnLIaxGRYahi2:mWWtN0P9AzwUFhKLTybMnkaQRRX
Checks for missing Authenticode signature.
resource |
---|
3d0fec626ce0b6420bff6b86b1746be0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
GetDC
EqualSid
BitBlt
CoInitialize
SysFreeString
ord17
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE