DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
957eb33e914e548e2e8f916eb1b3db94_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
957eb33e914e548e2e8f916eb1b3db94_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
957eb33e914e548e2e8f916eb1b3db94_JaffaCakes118
Size
69KB
MD5
957eb33e914e548e2e8f916eb1b3db94
SHA1
8c4e64699519eebb1e0571bfaa0a17a58161fae9
SHA256
3ed049b1bbc9c5cf1a200fbb21a51bc7b7e94cca2a7eeb047fd313b257fc2d24
SHA512
9d707ca40709146c38331eca86a2e07c41e2688a90960fc35afe5110fd244730a3d44091ded77873f3535b363f9a2b1e6a0a42edf698e5c2dc28d2902950becd
SSDEEP
1536:NabNkTcc5RijidUH7Uu0DAD32kfVcZHsJ4Bq:NgKTcc5RXd07dVD32kShBq
Checks for missing Authenticode signature.
resource |
---|
957eb33e914e548e2e8f916eb1b3db94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
DragQueryFileW
SysAllocString
CoTaskMemFree
BitBlt
TraceEvent
GetDC
ord8708
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE