DllCanUnloadNow
DllGetActivationFactory
Static task
static1
Behavioral task
behavioral1
Sample
ad70cb29b2bb508192af5af6f7d8db79_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ad70cb29b2bb508192af5af6f7d8db79_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
ad70cb29b2bb508192af5af6f7d8db79_JaffaCakes118
Size
127KB
MD5
ad70cb29b2bb508192af5af6f7d8db79
SHA1
9a2d007befc2fa198084e3c6fc9eb2e7c2b5b4af
SHA256
81e916619351ca1d16a7502ede072c205fcc61c0d526d4de746f5dbed4675390
SHA512
9912cf01f6c4cd1ef6f8b453feeee82035680a4b378f4220f0fa2fa42bdcc9ab17c69f5874cf2364e88fbe55ef5545e56ac29d6ddea25fc7934c7ecf0558eb4e
SSDEEP
3072:PHP+UMJtOiIwToyzcauImLtGmLxl/pcWQjj72O5rNNJvuDfeCx:PHnyAhVejj71/NJuz
Checks for missing Authenticode signature.
resource |
---|
ad70cb29b2bb508192af5af6f7d8db79_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
CoTaskMemFree
??0Object@Platform@@Q$AAA@XZ
_Wcscoll
??0critical_section@Concurrency@@QAE@XZ
strchr
wcstod
_cexit
wcslen
free
WindowsGetStringLen
DecodePointer
AcquireSRWLockShared
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
DllCanUnloadNow
DllGetActivationFactory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE