DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2a53ccaa01b9b81b984a3bfeb909e5bd_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2a53ccaa01b9b81b984a3bfeb909e5bd_JaffaCakes118
Size
977KB
MD5
2a53ccaa01b9b81b984a3bfeb909e5bd
SHA1
8a6661df7af5ea28a5fa7255e33622d53389a66f
SHA256
635861b7c78cae72c4fa97f2995501fafcefa2498e3097d51259841a4da9e6d9
SHA512
897274ce26d6cb4a48d18e0652228a31a908e54c30ffba0771753f00cb49f79e6d9a41ff5bc3e66e8bd18ed869fb95bd5e5778e9a20242ec82f9873137965a73
SSDEEP
24576:gNI4renWb4MT+Ngp8MOHLCv9kqKRlICxIKcb7qQ7T:gNfr+WbbbvKRqCxHc7R
Checks for missing Authenticode signature.
resource |
---|
2a53ccaa01b9b81b984a3bfeb909e5bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE