DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6e39e816893a83f727b1c75a0d50e0cd_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6e39e816893a83f727b1c75a0d50e0cd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
6e39e816893a83f727b1c75a0d50e0cd_JaffaCakes118
Size
183KB
MD5
6e39e816893a83f727b1c75a0d50e0cd
SHA1
5534113a52a45928c723124977d82302c8a3bb81
SHA256
a6e1efbe36aa76b3873fc8cb279dac3d7f7f1f122806af021d0b7c61cd08fec4
SHA512
2cd157a872b0df455e20fbd0e14c8c62e8a820ecf53ea5373badc7a2dd88f29e51083d4c4686b0ea1183d6f209e9cc385a5ac46971578d13fd52374b05d734de
SSDEEP
3072:p1UBuGIVk5C+Jt3k9/RTQMpq0wugwSdcY+2ZvR41jZ0f53DbxX5kq5D+99YR:kvIV/+JtURRFpKug9cYRz5TbLkq4fY
Checks for missing Authenticode signature.
resource |
---|
6e39e816893a83f727b1c75a0d50e0cd_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE