DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
6328011b17927c5c26f938e08aed5200_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6328011b17927c5c26f938e08aed5200_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
6328011b17927c5c26f938e08aed5200_JaffaCakes118
Size
28KB
MD5
6328011b17927c5c26f938e08aed5200
SHA1
d1ea0c5ef076751a4cd46a7d308cbe2232426208
SHA256
2be5aa1a9ddc6e987e71cb0ba2e1f1344c95198ac94a7263aba7efc867cb27bc
SHA512
73f421b97915ac343a5e0fed6619540fd31817c9beb4c54637b8978080af84d56256bfac75b4332fbdf85ef767f8fff9b8ae5e8c9fcbdd6be165628bbe9590e7
SSDEEP
768:gylOxeIspbXXoeeeAbc2+Dx/vgGBfypn+B4Ca7DmV:gyIxRmXoeeQzBfy8BHV
Checks for missing Authenticode signature.
resource |
---|
6328011b17927c5c26f938e08aed5200_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CoGetMalloc
DeleteDC
SysAllocStringLen
TraceEvent
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE