DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
9106b91a55a104134979dc03b5602a6e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
9106b91a55a104134979dc03b5602a6e_JaffaCakes118
Size
63KB
MD5
9106b91a55a104134979dc03b5602a6e
SHA1
f9f6c9e9c289451f9a58bf1349c6b82abb105e9e
SHA256
1191da6af7d142a7773a1af615e176049c94bcc7e8218da7397e193e3c7130ac
SHA512
b25cd405a5a2d5c611731122c289b4ad86c2a78606934ebb16d45f3a7cf5fe0ee080c6e222db2d0fbd7b6f966695534a9686d99b5c8639fc8fdc96b43f21fd53
SSDEEP
1536:KA+6Sh1b/KGTVJigakY+F7q3z5q2oKFKtBQoqOra65kOAQY:KAoh1b/j5Qkhq3zDoKgI0lUQY
Checks for missing Authenticode signature.
| resource |
|---|
| 9106b91a55a104134979dc03b5602a6e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
VerSetConditionMask
CharLowerW
SysFreeString
CoGetMalloc
ord154
ord130
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE