DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
a1865c3a2cc91f2560b0c240907264da_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a1865c3a2cc91f2560b0c240907264da_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
a1865c3a2cc91f2560b0c240907264da_JaffaCakes118
Size
93KB
MD5
a1865c3a2cc91f2560b0c240907264da
SHA1
c124243182a1bf35fdcd0bb290a8d30c8bab149a
SHA256
8bc6f66adab7fa1c295cabcd164e74e8843fc419cb0313787a8baf761c563854
SHA512
b4d8a79e2600d71c2d0ee21a7569883ec66ca6c02a816e4d9e0a0ab48af72a0c5c330c79ba6ffdd8d9f7989dc142ec15c182069a19ba1c1466af411a4a730a0c
SSDEEP
1536:4F0FKeV0JhNGjI3ddh0iNW9zhKX1YStweI7HFJcv6J4wi1ekniTinFqo5xG5U87O:OuKeiyj+dd2KWiJEHFCv64peBTdozaUI
Checks for missing Authenticode signature.
resource |
---|
a1865c3a2cc91f2560b0c240907264da_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RtlUnwind
ord159
GetDeviceCaps
GetDC
RegEnumKeyW
ord158
ord9
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE