DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9362628581f5126e652536fcaa853c03_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9362628581f5126e652536fcaa853c03_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
9362628581f5126e652536fcaa853c03_JaffaCakes118
Size
48KB
MD5
9362628581f5126e652536fcaa853c03
SHA1
221f46ae35746e46aa6efee4f6fea76ce629c9b2
SHA256
e7dd6c0b687b5576b61851619e90487101f0c222313525a22d867199a9e4e5e0
SHA512
8f11f24137eb3050406d3270f64f70e6a3cf4da0fa4269ca7bd5e027d44e6d07dc879ff439f06d93356a1e8a5fabdce1790a590a81da34419ebf335dae4056c4
SSDEEP
768:Jcx92noCO+pbVkEUHO/z1F/jITaAzyzF1cL0vp5vdlDtsQb7Dh:uQ3eEUHO/PjI+CyB1z5vdnsQt
Checks for missing Authenticode signature.
resource |
---|
9362628581f5126e652536fcaa853c03_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
TraceEvent
GetDC
BitBlt
ord184
ord155
SysStringLen
RtlCreateAcl
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE