DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
9a9390f234bac70cb0488759db34f96b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9a9390f234bac70cb0488759db34f96b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
9a9390f234bac70cb0488759db34f96b_JaffaCakes118
Size
29KB
MD5
9a9390f234bac70cb0488759db34f96b
SHA1
b031e7e5c0237ad39fba6f3e3f8eddeea05eb30f
SHA256
c5d3aa4b690820dd26ad6383d6ddf596bba5535ecd7ee26c17a22fffcc553a2a
SHA512
8ecc3dd83404712a373fbfe8aad5cc5bbd11db04ad363eff7b29316264b0aa7fa5e3a225eb115542604ee469733984ccd638622183cab268770aeea6cd566a3c
SSDEEP
768:JWcdHcPD84UA6ATlAFgtFzlmaci93cbv+s7DxP/T:Jfd684F6ATuFg7zlTcOcb+uP/T
Checks for missing Authenticode signature.
resource |
---|
9a9390f234bac70cb0488759db34f96b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CoGetMalloc
DeleteDC
SysAllocStringLen
TraceEvent
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE