DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
07063fd50d3f13dbe0fe404ccd4244e7_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
07063fd50d3f13dbe0fe404ccd4244e7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
07063fd50d3f13dbe0fe404ccd4244e7_JaffaCakes118
Size
59KB
MD5
07063fd50d3f13dbe0fe404ccd4244e7
SHA1
02216435808b5bddb88777a3271f0381822e0d9c
SHA256
cab8b37cd2af759e67dc23f516816bcca16c1304963d90fc4a47ab5b638743b9
SHA512
0097b53d649bb47bed4495dfcde93de17665c5589601d2de442b27ef4ea65c3eebc348c347ae2b666f7bb4d5f60dfb39d6f827ee4c4f7ffe4a0e2c1772b55845
SSDEEP
768:edjiBpl4QxlzAIBeTdOqdJMEPC6N90tK25slf1q46WdShLQLodTZCbJWAE:ed4VdBeVjPx/EJsv8eLSCUAE
Checks for missing Authenticode signature.
resource |
---|
07063fd50d3f13dbe0fe404ccd4244e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
EVENT_SINK_GetIDsOfNames
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE