DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
418b342b48e4c63e1c2b2e5ba7a7054a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
418b342b48e4c63e1c2b2e5ba7a7054a_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
418b342b48e4c63e1c2b2e5ba7a7054a_JaffaCakes118
Size
35KB
MD5
418b342b48e4c63e1c2b2e5ba7a7054a
SHA1
750f784ce5acf2d953caa2de449a52ffa67b5cb2
SHA256
fae86ff0e3ccfd18b42cb2f1007e4e85377144efc2bd257068b0a2e50d4e692d
SHA512
5ed01463298294a3be169b96193e0472598c02f8c9bee2f5aafa83545da09236a8cdb1533808a58a416ca2d77b22a6ea2ed6a7024343514731c4aeb22beca3a6
SSDEEP
768:sN2kO1VdW+prtnZbbEsEdYHpx8m7DmCCqq:S2k4XW+ttnZbEddY78RFqq
Checks for missing Authenticode signature.
resource |
---|
418b342b48e4c63e1c2b2e5ba7a7054a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CoTaskMemFree
SafeArrayRedim
CharNextW
RegCloseKey
InternetGetSecurityInfoByURLW
ord158
CertSerializeCertificateStoreElement
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE