DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
952c86635d66d4dbcddf768325aa6630_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
952c86635d66d4dbcddf768325aa6630_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
952c86635d66d4dbcddf768325aa6630_JaffaCakes118
Size
8KB
MD5
952c86635d66d4dbcddf768325aa6630
SHA1
fcb0d8c56af341111035d3b1427ab4ea5c8481e6
SHA256
7cd3e135dba455cd96b3ed01b10e3d3857d7a92b2827c3aaeaf3a0bcec1cfed8
SHA512
dfa3b9a1b061a608848ab096e1c7c49debd0c7d76fe3bf1e9f4b458744d4ac088c48910319076c3c4220d349385476dcf4fe55357624299d57405f5e0b0df6fc
SSDEEP
192:nIH4uvNG+2WXBf/AgzLv6i1Acioak1YpboLWZyr3CEaW:nKvNvBHAqei1AcT11YpboLWcCEaW
Checks for missing Authenticode signature.
resource |
---|
952c86635d66d4dbcddf768325aa6630_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
memcpy
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE