DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
Static task
static1
Behavioral task
behavioral1
Sample
0de4b91162d627b7335d32c8a6f5ea39_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0de4b91162d627b7335d32c8a6f5ea39_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0de4b91162d627b7335d32c8a6f5ea39_JaffaCakes118
Size
75KB
MD5
0de4b91162d627b7335d32c8a6f5ea39
SHA1
328aeb45cb7d3b183423d527bbccdc1a7a4fe081
SHA256
c3e9bf86f10109f45e376a483c7d5d6335d34346f7a0238da5224586a7683db8
SHA512
c2d4400afe252ea70e8016831486a2d47fe79795ca56269809d15e16b12700e638ca2a4bf747ff388d917fab4d5f9ccc78f4e110aba3f682e4469f61ed1d85e7
SSDEEP
1536:IcsE2Z4WvwoZiZfh5xKf0yDCE3eiz/UFPx28D86emU23+:YE2KawoZiBpmJN/4Px28D86po
Checks for missing Authenticode signature.
resource |
---|
0de4b91162d627b7335d32c8a6f5ea39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wvsprintfA
ord57
ord30
ord23
ord21
ord15
ord18
ord32
ord16
ord58
InitializeCriticalSection
GetStringTypeW
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GetSystemInfo
HeapCreate
lstrlenW
Sleep
DeleteFileA
GetStringTypeA
MultiByteToWideChar
LoadRegTypeLi
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_16101976
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ