DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunIE
Static task
static1
Behavioral task
behavioral1
Sample
20ce44fb47bd982b2a7575c6405036c2_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
20ce44fb47bd982b2a7575c6405036c2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
20ce44fb47bd982b2a7575c6405036c2_JaffaCakes118
Size
179KB
MD5
20ce44fb47bd982b2a7575c6405036c2
SHA1
af3533c82427abaf541343bee0af616306346d42
SHA256
18c55f805e5a70d9f7d9e4b334ba084f97c51d8baf68d81b3cee85c2fb5d9f0f
SHA512
3b08904c52d37ba46822b352f6d1ce4a998133375abeed8c0a7d2c1b2e7a36e9fbbf318b3e21a7811c34caa935f9e825ba1a46be5b71398b6c12789749190c3e
SSDEEP
3072:RbkQyhfs096ErUEIghQaGP+RSHfsjSAP++8MThcqiokg46mooQZj8N:1pmftgEgE1CP+cHy+rMTmZ/kh7
Checks for missing Authenticode signature.
resource |
---|
20ce44fb47bd982b2a7575c6405036c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunIE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE