DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
9f0bbbb2bebc5da9eed15b03ee9614b2_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9f0bbbb2bebc5da9eed15b03ee9614b2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
9f0bbbb2bebc5da9eed15b03ee9614b2_JaffaCakes118
Size
31KB
MD5
9f0bbbb2bebc5da9eed15b03ee9614b2
SHA1
a7f366e3f73236a2daec4dbeeb5a0aa89371b659
SHA256
ab501125abbf9f40374af63f8c78ea352309b64da8a95dbc75fb76720d93e8a6
SHA512
41b3ef549fd95fde676ab93634c813f9333f8b652b5e4336ab16d9e3028e169b1892abe5e098fec2fe6300e3150f2443b9cf5775d70ed70840fb5389d39a3495
SSDEEP
768:ggBPRFV6k81yuyeODONSCm6lxThxks23/hZl7Dn:ggBJFV6HceXsCS
Checks for missing Authenticode signature.
resource |
---|
9f0bbbb2bebc5da9eed15b03ee9614b2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RtlUnwind
LoadStringW
CopySid
SysFreeString
CoTaskMemFree
ord219
PatBlt
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE