DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
24e8d246fb7dd1586d0934b5128964b1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24e8d246fb7dd1586d0934b5128964b1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
24e8d246fb7dd1586d0934b5128964b1_JaffaCakes118
Size
138KB
MD5
24e8d246fb7dd1586d0934b5128964b1
SHA1
eae9ac2d244d1c52f641d150b7fa252ff8558a9a
SHA256
a5308d1c827c8155b958aadcb4b91418af776d3b50d8f6214c88a87e49649768
SHA512
7ee3f4b16011dfaddf05a4a99b961aae0168a0d4a7602b8755fd2c0b4a871d58a6acc0be87ed7c7efb460f69b5ac0914df60bc2fa1e8b0950382044ba3d4b3f1
SSDEEP
3072:HsQphl7Gk/fxZXNPlaJ7ixUbQJFbyVYpXlunzFw1I2o4Dw0NqDh:HXzHxZXNYhi7FOVYR2Fw144xNs
Checks for missing Authenticode signature.
resource |
---|
24e8d246fb7dd1586d0934b5128964b1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ