DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
6109cf5ccf841e35b81b0da71eaa7321_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6109cf5ccf841e35b81b0da71eaa7321_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
6109cf5ccf841e35b81b0da71eaa7321_JaffaCakes118
Size
93KB
MD5
6109cf5ccf841e35b81b0da71eaa7321
SHA1
c5a2e44d51f4fa83f475e0124cd8141d8a79882d
SHA256
567343b199d2f53794005351ae2399fa4b1a0ddf8c0975af9e3bcc88f50512fc
SHA512
a64031f877a22571e04f901b412f97905a4a94c1093c37a3bb47b5022a98a5eb8e8572cd4e78b7c2fb0e04005d552d453ea6dcb0cad9b5cf9ca585ec997ffed4
SSDEEP
1536:4+N8zfE1TbxsoVDADtNbKziHOg9tdc6TjnPR/Jrh7Qh40yGpitV3u:4+OTEJbKoSxntdnnPRY1MV3
Checks for missing Authenticode signature.
resource |
---|
6109cf5ccf841e35b81b0da71eaa7321_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RtlUnwind
ord159
GetDeviceCaps
GetDC
RegEnumKeyW
ord158
ord9
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE