DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0bdadcdd9cd763fce9ccfd88927a6369_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0bdadcdd9cd763fce9ccfd88927a6369_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0bdadcdd9cd763fce9ccfd88927a6369_JaffaCakes118
Size
179KB
MD5
0bdadcdd9cd763fce9ccfd88927a6369
SHA1
b81b55f1936cdb40a9319b7955c17c6681395578
SHA256
3c23e82bf2d58f33b7b4dc12909e6d50c63659e603066e7d4b69d468f5d2b155
SHA512
eba5faa80560cd4650d71955cca819592d70baa36c1032935bd6a2d540776bbbc2787e6be4e1fbbbde872d1f11148c1cbac4279e2440abdff1a4b86d6319f699
SSDEEP
3072:N+n5G0DyKCZzKy0yWWA3xoK7F7JLHXEZPYQXAGcHORjxrVDubimPhA6U7yfctuQ:N+n5V/CZp0IGaKXEZPYQyu/QimPhLEtp
Checks for missing Authenticode signature.
resource |
---|
0bdadcdd9cd763fce9ccfd88927a6369_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegQueryInfoKeyA
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE