DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
21fc393177827a1237dd82daf3865a13_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21fc393177827a1237dd82daf3865a13_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
21fc393177827a1237dd82daf3865a13_JaffaCakes118
Size
91KB
MD5
21fc393177827a1237dd82daf3865a13
SHA1
bf61155093f32a18ccb97bd9cc62feff6310b33f
SHA256
0b943190586717d595ba8665bf040a5eba67e509e2f571aed7de20b66df9fdf2
SHA512
44a7412fac33e179841b42ac55b5d17898bb70acf6c54a6a7f955de2a6e0cabf7b6324bc86f1fb2c2be4fc38d6534fcd19f3b0b186620271ab0a443cc1c8eafa
SSDEEP
1536:ZK3CZyJq/dljjrw8sTT1OfN7GkJfy4ie63xV2PzoFz70cKt86RCESw/:ZK34AqldXATCNykn63r2b40cQ8+1Sw/
Checks for missing Authenticode signature.
resource |
---|
21fc393177827a1237dd82daf3865a13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
FreeSid
SysFreeString
CharNextA
DLLCanUnloadNow
DLLGetClassObject
DLLRegisterServer
DLLUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE