DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
1bff7c7e245999c31dc038ac1fac8da6_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bff7c7e245999c31dc038ac1fac8da6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1bff7c7e245999c31dc038ac1fac8da6_JaffaCakes118
Size
215KB
MD5
1bff7c7e245999c31dc038ac1fac8da6
SHA1
69e20a689009fee3e63bad86eb261473bbf60545
SHA256
185f481956fcbacb156219293d75873ec6e545672237535f49a36171b21a10d2
SHA512
88f4092818ec499038165a26f29a90ea1a725f5e21a10cfc743c980eb3f09b6838a46c742ffd5609ce4439429ba1e40b606e55b58b816195111b3e0c2dcb71c5
SSDEEP
6144:ytmhIsX61wYZN7KkxIT/eip98fkgeph8AAJ5Ck1Gqz:yAi0Yv7v6Deip6Mgephy7CkH
Checks for missing Authenticode signature.
resource |
---|
1bff7c7e245999c31dc038ac1fac8da6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
memcmp
ReadFile
InterlockedDecrement
LocalFree
LocalAlloc
WideCharToMultiByte
CloseHandle
SetFilePointer
CreateFileA
GetModuleFileNameA
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ