DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
168481d5de7803958fee4b503e8e861d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
168481d5de7803958fee4b503e8e861d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
168481d5de7803958fee4b503e8e861d_JaffaCakes118
Size
957KB
MD5
168481d5de7803958fee4b503e8e861d
SHA1
9c135deb837a7738931b3b1cd411666cebf8bba7
SHA256
90fcbff6c8de4d6b15d9c62afffae98ac92c74f87adae5b0656f78a08bdac0b6
SHA512
2fb16319672c0fc04d61ad9e2b2b3482ce259135f00076089989b2e93bdc7c1b8b68befabfb744ce3444f25635dcc9e2ee2845d7377f8de153bf175301cd8367
SSDEEP
12288:Ep2hvrYinDjD7N0r2CQYWaaD/fHhbh4Uyyz993LzHRb:K2hjhf6rRdi/fHpp5Zh
Checks for missing Authenticode signature.
resource |
---|
168481d5de7803958fee4b503e8e861d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE