DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
90d7e7f30dd88b15b57c208ef796af2a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
90d7e7f30dd88b15b57c208ef796af2a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
90d7e7f30dd88b15b57c208ef796af2a_JaffaCakes118
Size
32KB
MD5
90d7e7f30dd88b15b57c208ef796af2a
SHA1
ea680e8f3897caa5947f0fa1e95835b97bf08bc8
SHA256
60b8bab297b4fa6620366e23a5cd6be5df697c34de1652b5c5698cf317516427
SHA512
71f73b8a66e1c38e30c72fef97eb675cd1ab026768ad5c870cbdec79d550a040524ab5820305ee2f31659a86fd3be256ed2336757c6b90d1e2ded9ff3ad8269b
SSDEEP
768:LJwX5mZkRtZEQh4YlcjstlSPiNL7DKIa:LJ6kyRtSQhnt8PcGIa
Checks for missing Authenticode signature.
resource |
---|
90d7e7f30dd88b15b57c208ef796af2a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
IsValidSid
LoadStringW
CoTaskMemFree
ord487
ntohs
FwFree
EtwTraceMessage
FwpmEngineOpen0
UuidCreate
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE