DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0ec830d61760ec54cabe3aa410caec34_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ec830d61760ec54cabe3aa410caec34_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0ec830d61760ec54cabe3aa410caec34_JaffaCakes118
Size
396KB
MD5
0ec830d61760ec54cabe3aa410caec34
SHA1
b289be4a224d624b71d07889a59ebb8951e7eb94
SHA256
d30fc841483b3a0aefd4d308df6df4d26018d5b204e29500c2366a6fa3c8bece
SHA512
89027268267b7cb7b335749731487671e8a044765b195d35a3ef27cabe3007f5227cb6090984acd3b463e4fb5d058af67d5c9fb1bc588d31042ae742059e06b5
SSDEEP
6144:DeYH1/d4GmE0gFlHF3gxcc+Gdp01oVS1lRMw5QTBJjQNTfSYpL8/:DFvh3lc+Ep01y8PM0QTrjQF7Lk
Checks for missing Authenticode signature.
resource |
---|
0ec830d61760ec54cabe3aa410caec34_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
GetModuleHandleA
GetProcAddress
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ